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Chapter 1 


Introduction 


The FE310-G002 is the second revision of the General Purpose Freedom E300 family. 


The FE310-G002 is built around the E31 Core Complex instantiated in the Freedom E300 plat- 
form and fabricated in the TSMC CL018G 180nm process. This manual serves as an architec- 
tural reference and integration guide for the FE310-G002. 


The FE310-G002 is compatible with all applicable RISC-V standards, and this document should 
be read together with the official RISC-V user-level, privileged, and external debug architecture 
specifications. 


1.1 FE310-G002 Overview 
Figure 1 shows the overall block diagram of the FE310-G002. 


A feature summary table can be found in Table 1. 
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Figure 1: FE310-G002 top-level block diagram. 
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| rentwre | escrnton | Sea 
QFN48 
1x E31 RISC-V cores with machine and user mode, 
RISC-V Core 16 KiB 2-way L1 I-cache, and 16 KiB data tightly inte- v 

grated memory (DTIM). 
nected to the PLIC with 7 levels of priority. 
serial communication. 
serial communication. 

Serial Peripheral Interface. QSPI 0 has 1 chip select sig- 
nal. (4 DQ lines) 

Vv 


SPI 1 Serial Peripheral Interface. SPI 1 has 4 chip select signals. | (3 CS lines) 
(2 DQ lines) 


Always On 
Supports low-power operation and wakeup. 


Table 1: FE310-G002 Feature Summary. 





1.2 E31 RISC-V Core 


The FE310-GO002 includes a 32-bit E31 RISC-V core, which has a high-performance single- 
issue in-order execution pipeline, with a peak sustainable execution rate of one instruction per 
clock cycle. The E31 core supports Machine and User privilege modes as well as standard Mul- 
tiply, Atomic, and Compressed RISC-V extensions (RV32IMAC). 


The core is described in more detail in Chapter 3. 


1.3 Interrupts 


The FE310-GO002 includes a RISC-V standard platform-level interrupt controller (PLIC), which 
supports 52 global interrupts with 7 priority levels. The FE310-GO02 also provides the standard 
RISC-V machine-mode timer and software interrupts via the Core-Local Interruptor (CLINT). 


Interrupts are described in Chapter 8. The CLINT is described in Chapter 9. The PLIC is 
described in Chapter 10. 
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1.4 On-Chip Memory System 


The E31 core has a(n) 2-way set-associative 16 KiB L1 instruction cache and a(n) 16 KiB L1 
DTIM. 


All cores have Physical Memory Protection (PMP) units. 


The Level 1 memories are described in Chapter 3. The PMP is described in Section 3.7. 


1.5 Always-On (AON) Block 


The AON block contains the reset logic for the chip, an on-chip low-frequency oscillator, a 
watchdog timer, connections for an off-chip low-frequency oscillator, the real-time clock, a pro- 
grammable power-management unit, and 32x32-bit backup registers that retain state while the 
rest of the chip is in a low-power mode. 


The AON can be instructed to put the system to sleep. The AON can be programmed to exit 
sleep mode on a real-time clock interrupt or when the external digital wakeup pin, dwakeup_n, is 
pulled low. The dwakeup_n input supports wired-OR connections of multiple wakeup sources. 


The Always-On block is described in Chapter 13. 


1.6 GPIO Complex 


The GPIO complex manages the connection of digital I/O pads to digital peripherals, including 
SPI, UART, I2C, and PWM controllers, as well as for regular programmed I/O operations. 


The GPIO complex is described in more detail in Chapter 17. 


1.7 Universal Asynchronous Receiver/Transmitter 


Multiple universal asynchronous receiver/transmitter (UARTs) are available and provide a 
means for serial communication between the FE310-G002 and off-chip devices. 


The UART peripherals are described in Chapter 18. 


1.8 Hardware Serial Peripheral Interface (SPI) 


There are 3 serial peripheral interface (SPI) controllers. Each controller provides a means for 
serial communication between the FE310-G002 and off-chip devices, like quad-SPI Flash mem- 
ory. Each controller supports master-only operation over single-lane, dual-lane, and quad-lane 
protocols. Each controller supports burst reads of 32 bytes over TileLink to accelerate instruc- 
tion cache refills. 1 SPI controller can be programmed to support eXecute-In-Place (XIP) modes 
to reduce SPI command overhead on instruction cache refills. 
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The SPI interface is described in more detail in Chapter 19. 


1.9 Pulse Width Modulation 


The pulse width modulation (PWM) peripheral can generate multiple types of waveforms on 
GPIO output pins and can also be used to generate several forms of internal timer interrupt. 


The PWM peripherals are described in Chapter 20. 


1.10 IC 


The FE310-G002 has an [2C controller to communicate with external 12C devices, such as sen- 
sors, ADCs, etc. 


The I?C is described in detail in Chapter 21. 


1.11 Debug Support 


The FE310-G002 provides external debugger support over an industry-standard JTAG port, 
including 8 hardware-programmable breakpoints per hart. 


Debug support is described in detail in Chapter 22, and the debug interface is described in 
Chapter 23. 


Chapter 2 


List of Abbreviations and Terms 
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interrupts. 
local interrupts. 


LIM Loosely Integrated Memory. Used to describe memory space delivered in 
IM | SSeve Core comport noi negatadtoaGPU coe. 
|PMP_ | PhysicalMemory Protection, 


PLIC Platform-Level Interrupt Controller. The global interrupt controller in a 
RISC-V system. 

TileLink A free and open interconnect standard originally developed at UC Berke- 
ley. 


|RO. | Used to describe aRead Onlyregisterfield 
|RW | Used to describe a Read/Write registerfield, 
[wo | Used to describe a Write Only registers field. 
value, but returns only supported values when read. 
Writes-Ignored, Reads-lIgnore field. A read-only register field reserved for 
future use. Writes to the field are ignored, and reads should ignore the 
value returned. 
Write-Legal, Read-Legal field. A register field that should only be written 
with legal values and that only returns legal value if last written with a 
legal value. 
Writes-Preserve Reads-Ignore field. A register field that might contain 
unknown information. Reads should ignore the value returned, but writes 
to the whole register should preserve the original value. 





Chapter 3 


E31 RISC-V Core 


This chapter describes the 32-bit E31 RISC-V processor core used in the FE310-G002. The 
E31 processor core comprises an instruction memory system, an instruction fetch unit, an exe- 
cution pipeline, a data memory system, and support for global, software, and timer interrupts. 


The E31 feature set is summarized in Table 2. 


ISA RV32IMAC. 
Instruction Cache 16 KiB 2-way instruction cache 


Data Tightly Integrated Memory 16 KiB DTIM. 
Modes The E31 supports the following modes 
Machine Mode, User Mode. 


Table 2: E31 Feature Set 


Instruction Tightly Integrated Memory The E31 has support for an ITIM with a maxi- 
mum size of 8 KiB. 





3.1 Instruction Memory System 


The instruction memory system consists of a dedicated 16 KiB 2-way set-associative instruction 
cache. The access latency of all blocks in the instruction memory system is one clock cycle. The 
instruction cache is not kept coherent with the rest of the platform memory system. Writes to 
instruction memory must be synchronized with the instruction fetch stream by executing a 
FENCE.| instruction. 


The instruction cache has a line size of 32 bytes, and a cache line fill triggers a burst access. 
The core caches instructions from executable addresses, with the exception of the Instruction 
Tightly Integrated Memory (ITIM), which is further described in Section 3.1.1. See the 
FE310-G002 Memory Map in Chapter 4 for a description of executable address regions that are 
denoted by the attribute X. 


Trying to execute an instruction from a non-executable address results in a synchronous trap. 


15 
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3.1.1 1-Cache Reconfigurability 


The instruction cache can be partially reconfigured into ITIM, which occupies a fixed address 
range in the memory map. ITIM provides high-performance, predictable instruction delivery. 
Fetching an instruction from ITIM is as fast as an instruction-cache hit, with no possibility of a 
cache miss. ITIM can hold data as well as instructions, though loads and stores from a core to 
its ITIM are not as performant as loads and stores to its Data Tightly Integrated Memory (DTIM). 


The instruction cache can be configured as ITIM for all ways except for 1 in units of cache lines 
(32 bytes). A single instruction cache way must remain an instruction cache. ITIM is allocated 
simply by storing to it. A store to the n*" byte of the ITIM memory map reallocates the first n+1 
bytes of instruction cache as ITIM, rounded up to the next cache line. 


ITIM is deallocated by storing zero to the first byte after the ITIM region, that is, 8 KiB after the 
base address of ITIM as indicated in the Memory Map in Chapter 4. The deallocated ITIM space 
is automatically returned to the instruction cache. 


For determinism, software must clear the contents of ITIM after allocating it. It is unpredictable 
whether ITIM contents are preserved between deallocation and allocation. 


3.2 Instruction Fetch Unit 


The E31 instruction fetch unit contains branch prediction hardware to improve performance of 
the processor core. The branch predictor comprises a 28-entry branch target buffer (BTB) which 
predicts the target of taken branches, a 512-entry branch history table (BHT), which predicts the 
direction of conditional branches, and a 6-entry return-address stack (RAS) which predicts the 
target of procedure returns. The branch predictor has a one-cycle latency, so that correctly pre- 
dicted control-flow instructions result in no penalty. Mispredicted control-flow instructions incur a 
three-cycle penalty. 


The E31 implements the standard Compressed (C) extension to the RISC-V architecture, which 
allows for 16-bit RISC-V instructions. 


3.3 Execution Pipeline 


The E31 execution unit is a single-issue, in-order pipeline. The pipeline comprises five stages: 
instruction fetch, instruction decode and register fetch, execute, data memory access, and regis- 
ter writeback. 


The pipeline has a peak execution rate of one instruction per clock cycle, and is fully bypassed 
so that most instructions have a one-cycle result latency. There are several exceptions: 

e LW has a two-cycle result latency, assuming a cache hit. 

e LH, LHU, LB, and LBU have a three-cycle result latency, assuming a cache hit. 


¢ CSR reads have a three-cycle result latency. 
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e MUL, MULH, MULHU, and MULHSU have a 5-cycle result latency. 


¢ DIV, DIVU, REM, and REMU have between a 2-cycle and 33-cycle result latency, depending 
on the operand values. 


The pipeline only interlocks on read-after-write and write-after-write hazards, so instructions 
may be scheduled to avoid stalls. 


The E31 implements the standard Multiply (M) extension to the RISC-V architecture for integer 

multiplication and division. The E31 has a 8-bit per cycle hardware multiply and a 1-bit per cycle 
hardware divide. The multiplier can only execute one operation at a time and will block until the 

previous operation completes. 


The hart will not abandon a Divide instruction in flight. This means if an interrupt handler tries to 
use a register that is the destination register of a divide instruction the pipeline stalls until the 
divide is complete. 


Branch and jump instructions transfer control from the memory access pipeline stage. Correctly- 
predicted branches and jumps incur no penalty, whereas mispredicted branches and jumps 
incur a three-cycle penalty. 


Most CSR writes result in a pipeline flush with a five-cycle penalty. 


3.4 Data Memory System 


The E31 data memory system consists of a DTIM. The access latency from a core to its own 
DTIM is two clock cycles for full words and three clock cycles for smaller quantities. Misaligned 
accesses are not supported in hardware and result in a trap to allow software emulation. 


Stores are pipelined and commit on cycles where the data memory system is otherwise idle. 
Loads to addresses currently in the store pipeline result in a five-cycle penalty. 


3.5 Atomic Memory Operations 


The E31 core supports the RISC-V standard Atomic (A) extension on the DTIM and the periph- 
eral memory region. Atomic memory operations to regions that do not support them generate an 
access exception precisely at the core. 


The load-reserved and store-conditional instructions are only supported on cached regions, 
hence generate an access exception on DTIM and other uncached memory regions. 


See The RISC-V Instruction Set Manual, Volume I: User-Level ISA, Version 2.1 for more infor- 
mation on the instructions added by this extension. 
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3.6 Supported Modes 


The E31 supports RISC-V user mode, providing two levels of privilege: machine (M) and user 
(U). U-mode provides a mechanism to isolate application processes from each other and from 
trusted code running in M-mode. 


See The RISC-V Instruction Set Manual, Volume II: Privileged Architecture, Version 1.10 for 
more information on the privilege modes. 


3.7 Physical Memory Protection (PMP) 


The E31 includes a Physical Memory Protection (PMP) unit compliant with The RISC-V Instruc- 
tion Set Manual, Volume II: Privileged Architecture, Version 1.10. PMP can be used to set mem- 
ory access privileges (read, write, execute) for specified memory regions. The E31 PMP sup- 
ports 8 regions with a minimum region size of 4 bytes. 


This section describes how PMP concepts in the RISC-V architecture apply to the E31. The 
definitive resource for information about the RISC-V PMP is The RISC-V Instruction Set Manual, 
Volume II: Privileged Architecture, Version 1.10. 


3.7.1 Functional Description 


The E31 includes a PMP unit, which can be used to restrict access to memory and isolate 
processes from each other. 


The E31 PMP unit has 8 regions and a minimum granularity of 4 bytes. Overlapping regions are 
permitted. The E31 PMP unit implements the architecturally defined pmpcfgX CSRs pmpcf gO 
and pmpcfg1 supporting 8 regions. pmpcfg2 and pmpcfg3 are implemented but hardwired to 
zero. 


The PMP registers may only be programmed in M-mode. Ordinarily, the PMP unit enforces per- 
missions on U-mode accesses. However, locked regions (See Section 3.7.2) additionally 
enforce their permissions on M-mode. 


3.7.2 Region Locking 


The PMP allows for region locking whereby, once a region is locked, further writes to the config- 
uration and address registers are ignored. Locked PMP entries may only be unlocked with a 
system reset. A region may be locked by setting the L bit in the pmpicfg register. 


In addition to locking the PMP entry, the L bit indicates whether the R/W/X permissions are 
enforced on M-Mode accesses. When the L bit is clear, the R/W/X permissions apply only to U- 
mode. 
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3.8 Hardware Performance Monitor 


The FE310-G002 supports a basic hardware performance monitoring facility compliant with The 
RISC-V Instruction Set Manual, Volume II: Privileged Architecture, Version 1.10. The mcycle 
CSR holds a count of the number of clock cycles the hart has executed since some arbitrary 
time in the past. The minstret CSR holds a count of the number of instructions the hart has 
retired since some arbitrary time in the past. Both are 64-bit counters. The mcycle and 
minstret CSRs hold the 32 least-significant bits of the corresponding counter, and the mcycleh 
and minstreth CSRs hold the most-significant 32 bits. 


The hardware performance monitor includes two additional event counters, mhpmcounter3 and 
mhpmcounter4. The event selector CSRs mhpmevent3 and mhpmevent4 are registers that con- 
trol which event causes the corresponding counter to increment. The mhpmcounters are 40-bit 
counters. The mhpmcounter_i CSR holds the 32 least-significant bits of the corresponding 
counter, and the mhpmcounter_ih CSR holds the 8 most-significant bits. 


The event selectors are partitioned into two fields, as shown in Table 3: the lower 8 bits select 
an event class, and the upper bits form a mask of events in that class. The counter increments if 
the event corresponding to any set mask bit occurs. For example, if mhpmevent3 is set to 
0x4200, then mhpmcounter3 will increment when either a load instruction or a conditional 
branch instruction retires. An event selector of 0 means "count nothing." 


Note that in-flight and recently retired instructions may or may not be reflected when reading or 
writing the performance counters or writing the event selectors. 
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Machine Hardware Performance Monitor Event Register 


[Meaning 


[Meaning 


/8 _| Instruction cache miss 
19 | Memory-mapped I/O access 


Table 3: mhpmevent Register Description 


Branch/jump target misprediction 
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Chapter 4 


Memory Map 


The memory map of the FE310-GO002 is shown in Table 4. 
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Base Att. | Description | __Notes__—_—_| 
0x0000_4000 On-Chip Non Volatile Mem- 
0x1001,_3000 RW_A eine 


©x2000_0000 | Ox3FFF_FFFF | R XC | QSPIO Flash 
(ietcoesaal| (512 MiB) Off-Chip Non-Volatile Mem- 


or 
0x4000_0000 | Ox7FFF_FFFF | —_| Reserved z 
0x8000_0000 | 0x8000_3FFF | RWX A | E31 DTIM (16 KiB) 

On-Chip Volatile Memory 
0x8000_4000 | OxFFFF_FFFF | —_| Reserved 


Table 4: FE310-G002 Memory Map. Memory Attributes: R - Read, W - Write, X - Execute, C - 
Cacheable, A - Atomics 


R X 
R X 





Chapter 5 


Boot Process 


The FE310-G002 supports booting from several sources, which are controlled using the Mode 
Select (MSEL[1:0]) pins on the chip. All possible values are enumerated in Table 5. 


MSEL 
| 00 —_| loops forever waiting for debugger 


jump directly to Ox2000_0000 (memory-mapped QSPIO) 
jump directly to Ox0002_0000 (OTP) 
jump directly to 0x0001_0000 (Mask ROM: Default Boot Mode) 


Table 5: Boot media based on MSEL pins 





5.1 Reset Vector 


On power-on, the core’s reset vector is 0x1004. 


Table 6: Reset vector ROM 





This small gate ROM implements an MSEL-dependent jump for all cores as follows: 


23 


Copyright © 2019, SiFive Inc. All rights reserved. 24 


MSEL | Reset address 
loops forever waiting for debugger 
memory-mapped QSPIO 





memory-mapped OTP 
memory-mapped Mask ROM (jumps to OTP) 


Table 7: Target of the reset vector 


5.1.1 Mask ROM (MROM) 


MROM is fixed at design time, and is located on the peripheral bus on FE310-GO002, but instruc- 
tions fetched from MROM are cached by the core’s I-cache. The MROM contains an instruction 
at address 0x1_0000 which jumps to the OTP start address at 0x2_0000. 


5.1.2 One-Time Programmable (OTP) Memory 


The OTP is located on the peripheral bus, with both a control register interface to program the 
OTP, and a memory read port interface to fetch words from the OTP. Instruction fetches from the 
OTP memory read port are cached in the E31 core’s instruction cache. 


The OTP needs to be programmed before use and can only be programmed by code running 
on the core. The OTP bits contain all Os prior to programming. 


5.1.3 Quad SPI Flash Controller (QSPI) 


The dedicated QSPI flash controller connects to external SPI flash devices that are used for 
execute-in-place code. SPI flash is not available in certain scenarios such as package testing or 
board designs not using SPI flash (e.g., just using on-chip OTP). 


Off-chip SPI devices can vary in number of supported I/O bits (1, 2, or 4). SPI flash bits contain 
all 1s prior to programming. 


Chapter 6 


Clock Generation 


The FE310-G002 supports many alternative clock-generation schemes to match application 
needs. This chapter describes the structure of the clock generation system. The various clock 
configuration registers live either in the AON block (Chapter 13) or the PRCI block (Section 6.2). 


6.1 Clock Generation Overview 
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Figure 2: FE310-G002 clock generation scheme 


Figure 2 shows an overview of the FE310-G002 clock generation scheme. Most digital clocks 
on the chip are divided down from a central high-frequency clock hfc1k produced from either 
the PLL or an on-chip trimmable oscillator. The PLL can be driven from either the on-chip oscil- 
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lator or an off-chip crystal oscillator. The off-chip oscillator can also drive the high-frequency 
clock directly. 


For the FE310-GO002, the TileLink bus clock (t1c1k) is fixed to be the same as the processor 
core clock (coreclk). 


The Always-On block includes a real-time clock circuit that is driven from one of the low-fre- 
quency clock sources: an off-chip oscillator (LFOSC) or an an on-chip low-frequency oscillator 
(LFROSC). 


6.2 PRCI Address Space Usage 


PRCI (Power, Reset, Clock, Interrupt) is an umbrella term for platform non-AON memory- 
mapped control and status registers controlling component power states, resets, clock selection, 
and low-level interrupts, hence the name. The PRCI registers are generally only made visible to 
machine-mode software. The AON block contains registers with similar functions, but only for 
the AON block units. 


Table 8 shows the memory map for the PRCI on the FE310-G002. 


| Offset_ 
hfrosccfg | Ring Oscillator Configuration and Status 
hfxosccfg | Crystal Oscillator Configuration and Status 


pllcfg PLL Configuration and Status 
plloutdiv | PLL Final Divide Configuration 
Process Monitor Configuration and Status 


Table 8: SiFive PRCI memory map, offsets relative to PRCI base address. 





6.3 Internal Trimmable Programmable 72 MHz Oscillator 
(HFROSC) 


An internal trimmable high-frequency ring oscillator (HFROSC) is used to provide the default 
clock after reset, and can be used to allow operation without an external high-frequency crystal 
or the PLL. 


The oscillator is controlled by the hfrosccfg register, which is memory-mapped in the PRCI 
address space, and whose format is shown in Table 9. 
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rBits | Field Name | attr. [Ret |Description __—+ 
ere eee aa 


| [15:6] | Reserved | | 

| (29:21) | 
Ring Oscillator Enable 

[a1 [hfreserdy [ro [x Ring Oscillator Ready | 


Table 9: hfrosccfg: Ring Oscillator Configuration and Status 





The frequency can be adjusted in software using a 5-bit trim value in the hfrosctrim. The trim 
value (from O—31) adjusts which tap of the variable delay chain is fed back to the start of the 
ring. A value of 0 corresponds to the longest chain and slowest frequency, while higher values 
correspond to shorter chains and therefore higher frequencies. 


The HFROSC oscillator output frequency can be divided by an integer between 1 and 64 giving 
a frequency range of 1.125 MHz—72 MHz assuming the trim value is set to give a 72 MHz out- 
put. The value of the divider is given in the hfroscdiv field, where the divide ratio is one greater 
than the binary value held in the field (i.e., hf roscdiv=0 indicates divide by 1, hfroscdiv=1 
indicates divide by 2, etc.). The value of the divider can be changed at any time. 


The HFROSC is the default clock source used for the system core at reset. After a reset, the 
hfrosctrim value is reset to 16, the middle of the adjustable range, and the divider is reset to 
divide-by-5 (hf roscdiv=4), which gives a nominal 13.8 MHz (+50%) output frequency. 


The value of hfrosctrim that most closely achieves an 72 MHz clock output at nominal condi- 
tions (1.8 V at 25 °C) is determined by manufacturing-time calibration and is stored in on-chip 
OTP storage. Upon reset, software in the processor boot sequence can write the calibrated 
value into the hfrosctrim field, but the value can be altered at any time during operation 
including when the processor is running from HFROSC. 


To save power, the HFROSC can be disabled by clearing hfroscen. The processor must be 
running from a different clock source (the PLL, external crystal, or external clock) before dis- 
abling HFROSC. HFROSC can be explicitly renabled by setting hf roscen. HFROSC will be 
automatically re-enabled at every reset. 


The status bit hfroscrdy indicates if the oscillator is operational and ready for use as a clock 
sOUIce. 


6.4 External 16 MHz Crystal Oscillator (HFXOSC) 


An external high-frequency 16 MHz crystal oscillator can be used to provide a precise clock 
source. The crystal oscillator should have a capacitive load of s 12 pF and an ESR < 80 Q. 
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When used to drive the PLL, the 16 MHz crystal oscillator output frequency must be divided by 
two in the first-stage divider of the PLL (i.e., A = 2) to provide an 8 MHz reference clock to the 
VCO. 


The input pad of the HFXOSC can also be used to supply an external clock source, in which 
case, the output pad should be left unconnected. 


The HFXOSC input can be used to generate hfclk directly if the PLL is set to bypass. 


The HFXOSC is controlled via the memory-mapped hfxosccfg register. 


hfxosccfg: Crystal Oscillator Configuration and Status (hfxosccfg) 


Register Offset 
pits —_ | Field Name Ret. | Description 


[29:0] | Reserved | 
hfxoscen x1 | Crystal Oscillator Enable 





hfxoscrdy Crystal Oscillator Ready 


Table 10: hfxosccfg: Crystal Oscillator Configuration and Status 


The hfxoscen bit turns on the crystal driver and is set on wakeup reset, but can be cleared to 
turn off the crystal driver and reduce power consumption. The hfxoscrdy bit indicates if the 
crystal oscillator output is ready for use. 


The hfxoscen bit must also be turned on to use the HFXOSC input pad to connect an external 
clock source. 


6.5 Internal High-Frequency PLL (HFPLL) 


The PLL generates a high-frequency clock by multiplying a mid-frequency reference source 
clock, either the HFROSC or the HFXOSC. The input frequency to the PLL can be in the range 
6—48 MHz. The PLL can generate output clock frequencies in the range 48-384 MHz. 


The PLL is controlled by a memory-mapped read-write pllcfg register in the PRCI address 
space. The format of pllcfg is shown in Table 11. 
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Register Offset 
Field Name | Attr[ Rst. | Description 
] [pur 


3__| Reserved ee 
PLL F Value 


9:4] | pllf 


=, 
[it10} | pila 
Es 
W 


O|. IN 
O 
boa 


15:12] [Reserved rs 
16 | plisel 
17 | pliretsel 
18 | plibypass 
3019] [Reseed | | | SSS 
a1 | piiiock [Ro | x [PLL Lock 


Table 11: plilcfg: PLL Configuration and Status 





Figure 3 shows how the PLL output frequency is set using a combination of three read-write 
fields: pllr[2:0], pllf [2:0], pllq[1:0]. The frequency constraints must be observed 
between each stage for correct operation. 


pllref refr 
6-48MHz 6-12MHz 
pllr[1:0] 


=1,2;3,4 BO Aes AS =2,4,8 


pllout 
48-384MHz 








Figure 3: Controlling the FE310-G002 PLL output frequency. 


The plir[1:0] field encodes the reference clock divide ratio as a 2-bit binary value, where the 
value is one less than the divide ratio (i.e., 0@@=1, 11=4). The frequency of the output of the refer- 
ence divider (refr) must lie between 6—12 MHz. 


The pl1f[5:0] field encodes the PLL VCO multiply ratio as a 6-bit binary value, NV, signifying a 
divide ratio of 2 x (N + 1) (i.e., 000000=2, 111111=128). The frequency of the VCO output 
(vco) must lie between 384—768 MHz. Table 12 summarizes the valid settings of the multiply 
ratio. 
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refr (MHz) vco frequency (MHz) 
po A128 | 884 | 768 


PB 884 | 768 | 
Table 12: Valid PLL multiply ratios. The multiplier setting in the 
table is given as the actual multiply ratio; the binary value 
stored in p11f field should be (14/2) — 1 for a multiply ratio 
M. 





The pllq[1:0] field encodes the PLL output divide ratio as follows, 01=2, 10=4, 11=8. The 
value 00 is not supported. The final output of the PLL must have a frequency that lies between 
48-384 MHz. 


The one-bit read-write pllbypass field in the pllcfg register turns off the PLL when written with 
a 1 and then pllout is driven directly by the clock indicated by pllrefsel. The other PLL reg- 
isters can be configured when pllbypass is set. The agent that writes pllcfg should be run- 
ning from a different clock source before disabling the PLL. The PLL is also disabled with 
pllbypass=1 after a wakeup reset. 


The pllsel bit must be set to drive the final hfc1k with the PLL output, bypassed or otherwise. 
When pllisel1 is clear, the hfroscclk directly drives hfclk. The pllsel bit is clear on wakeup 
reset. 


The plicfg register is reset to: bypass and power off the PLL pllbypass=1; input driven from 
external HFXOSC oscillator pllrefse1=1; PLL not driving system clock p1lse1=0; and the PLL 
ratios are set to R=2, F=64, and Q=8 (pl1lr=01, pl11f=011111, pl1lq=11). 


The PLL provides a lock signal which is set when the PLL has achieved lock, and which can be 
read from the most-significant bit of the pllcfg register. The PLL requires up to 100 us to 
regain lock once enabled, and the lock signal will not necessarily be stable during this initial lock 
period so should only be interrogated after this period. The PLL may not achieve lock and the 
lock signal might not remain asserted if there is excessive jitter in the source clock. 


The PLL requires dedicated 1.8 V power supply pads with a supply filter on the circuit board. 
The supply filter should be a 100 Q resistor in series with the board 1.8 V supply decoupled with 
a 100 nF capacitor across the VDDPLL/VSSPLL supply pins. The VSSPLL pin should not be 
connected to board VSS. 


6.6 PLL Output Divider 


The plloutdiv register controls a clock divider that divides the output of the PLL. 
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plloutdiv: PLL Final Divide Configuration (plloutdiv) 


Register Offset 
Bits | Field Name | Attr. [ Rst. | Description 


rire] PResenedi! | | 
etia] Reseed ot tT ] 


Table 13: plloutdiv: PLL Final Divide Configuration 





If the plloutdivby1 bit is set, the PLL output clock is passed through undivided. If 
plloutdivby1 is clear, the value N in plloutdiv sets the clock-divide ratio to 2 x (N + 1) 
(between 2-128). The output divider expands the PLL output frequency range to 

0.375—-384 MHz. 


The plloutdivby1 register is reset to divide-by-1 (plloutdivby1=1). 


6.7 Internal Programmable Low-Frequency Ring Oscillator 
(LFROSC) 


A second programmable ring oscillator (L_FROSC) is used to provide an internal low-frequency 
32 kHz clock source. The LFROSC can generate frequencies in the range 1.5—230 kHz 
(+45%). 

The 1frosccfg register lives in the AON block as shown in Table 36. 


At power-on reset, the LFROSC resets to selecting the middle tap (1frosctrim=16) and +5 
(1froscdiv=4), resulting in an output frequency of ~30 kHz. 


The LFROSC can be calibrated in software using a more accurate high-frequency clock source. 


Bits —_| Field Name | attr. [Ret.| Description __——*d 
fee 


“t1s6] [Reseved | | 
pon) Reseved |] | CS 
[31 [ifroscrdy [ro | x Ring Oscillator Ready | 


Table 14: lfrosccfg: Ring Oscillator Configuration and Status 
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6.8 Alternate Low-Frequency Clock (LFALTCLK) 


An external low-frequency clock can be driven on the psd1lfaltclk pad, when the 
psdlfaltclksel is tied low. This mux selection can also be controlled by software using the 
1fextclk_sel in 1fclkmux shown in Table 15. The current value of the psdlfaltclksel pad 
can be read in 1fextclk_mux_status field. 


lfclkmux: Low-Frequency Clock Mux Control and Status (1fc1kmux) 


Register Offset Ox7C 
| Bits | Field Name | Attr. | Rst. | Description 


| 0 | 1fextclk_sel Low Frequency Clock Source Selector 
[30:1] 
1fextclk_mux_status | RO | xX | Setting of the aon_lfclksel pin 


Table 15: Ifclkmux: Low-Frequency Clock Mux Control and Status 





6.9 Clock Summary 


Table 16 summarizes the major clocks on the FE310-G002 and their initial reset conditions. At 
external reset, the AON domain 1fclk is clocked by either the LFROSC or psdlfaltclk, as 
selected by psdlfaltclksel. At wakeup reset, the MOFF domain hfclk is clocked by the 
HFROSC. 


Reset 
Source | Reset___[Min | ___Max| 


AON Domain 


LFROSC 32 kHz 1.5 kHz 230 kHz 


psdlfaltclk 0 kHz 500 kHz | When selected 
by 
psdlfaltclksel 


MOFF Domain 


HFROSC 13.8 MHz | 0.77 MHz 20 MHz 


HiFive 
source 


oa7eMHz| se4wHz{ CS 
TAGTOR.[- + oFF[—OMHz|—temez| SSSCSC~*™ 


Table 16: FE310-G002 Clock Sources 





Chapter 7 


Power Modes 


This chapter describes the different power modes available on the FE310-G002. The 
FE310-G002 supports three power modes: Run, Wait, and Sleep. 


7.1 Run Mode 


Run mode corresponds to regular execution where the processor is running. Power consump- 
tion can be adjusted by varying the clock frequency of the processor and peripheral bus, and by 
enabling or disabling individual peripheral blocks. The processor exits run mode by executing a 
"Wait for Interrupt" (WFI) instruction. 


7.2 Wait Mode 


When the processor executes a WEI instruction it enters Wait mode, which halts instruction exe- 
cution and gates the clocks driving the processor pipeline. All state is preserved in the system. 
The processor will resume in Run mode when there is a local interrupt pending or when the 
PLIC sends an interrupt notification. The processor may also exit wait mode for other events, 
and software must check system status when exiting wait mode to determine the correct course 
of action. 


7.3 Sleep Mode 


Sleep mode is entered by writing to a memory-mapped register pmusleep in the power-man- 
agement unit (PMU). The pmusleep register is protected by the pmukey register which must be 
written with a defined value before writing to pmusleep. 


The PMU will then execute a power-down sequence to turn off power to the processor and main 


pads. All volatile state in the system is lost except for state held in the AON domain. The main 
output pads will be left floating. 
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Sleep mode is exited when an enabled wakeup event occurs, whereupon the PMU will initiate a 
wakeup sequence. The wakeup sequence turns on the core and pad power supplies while 
asserting reset on the clocks, core and pads. After the power supplies stabilize, the clock reset 
is deasserted to allow the clocks to stabilize. Once the clocks are stable, the pad and processor 
resets are deasserted, and the processor begins running from the reset vector. 


Software must reinitialize the core and can interrogate the PMU pmucause register to determine 
the cause of reset, and can recover pre-sleep state from the backup registers. The processor 
always initially runs from the HFROSC at the default setting, and must reconfigure clocks to run 
from an alternate clock source (HFXOSC or PLL) or at a different setting on the HFROSC. 


Because the FE310-G002 has no internal power regulator, the PMU’s control of the power sup- 
plies is through chip outputs, pmu_out_0 and pmu_out_1. The system integrator can use these 
outputs to enable and disable the power supplies connected to the FE310-G002. 


Chapter 8 


Interrupts 


This chapter describes how interrupt concepts in the RISC-V architecture apply to the 
FE310-G002. 


The definitive resource for information about the RISC-V interrupt architecture is The RISC-V 
Instruction Set Manual, Volume II: Privileged Architecture, Version 1.10. 


8.1 Interrupt Concepts 


The FE310-G002 supports Machine Mode interrupts. It also has support for the following types 
of RISC-V interrupts: local and global. 


Local interrupts are signaled directly to an individual hart with a dedicated interrupt value. This 
allows for reduced interrupt latency as no arbitration is required to determine which hart will ser- 
vice a given request and no additional memory accesses are required to determine the cause of 
the interrupt. 


Software and timer interrupts are local interrupts generated by the Core-Local Interruptor 
(CLINT). The FE310-G002 contains no other local interrupt sources. 


Global interrupts, by contrast, are routed through a Platform-Level Interrupt Controller (PLIC), 
which can direct interrupts to any hart in the system via the external interrupt. Decoupling global 
interrupts from the hart(s) allows the design of the PLIC to be tailored to the platform, permitting 
a broad range of attributes like the number of interrupts and the prioritization and routing 
schemes. 

This chapter describes the FE310-GO002 interrupt architecture. 

Chapter 9 describes the Core-Local Interruptor. 


Chapter 10 describes the global interrupt architecture and the PLIC design. 


The FE310-G002 interrupt architecture is depicted in Figure 4. 
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FE310-G002 Interrupt Architecture 











Machine External Interrupt——>| 
2x UART 

3x QSPI 3—>| PLIC 

GPIO 32———_>| 

3x PWM 12———_> E 3 1 

—| 














Machine Software Interrupt——>| 
Machine Timer Interrupt——t~| 





CLINT 





























Figure 4: FE310-G002 Interrupt Architecture Block Diagram. 


8.2 Interrupt Operation 


If the global interrupt-enable mstatus.MIE is clear, then no interrupts will be taken. If 
mstatus.MIE Is set, then pending-enabled interrupts at a higher interrupt level will preempt cur- 
rent execution and run the interrupt handler for the higher interrupt level. 


When an interrupt or synchronous exception is taken, the privilege mode is modified to reflect 
the new privilege mode. The global interrupt-enable bit of the handler’s privilege mode is 
cleared. 


8.2.1 Interrupt Entry and Exit 
When an interrupt occurs: 
¢ The value of mstatus.MIE is copied into mcause.MPIE, and then mstatus.MIE is Cleared, 
effectively disabling interrupts. 
¢ The privilege mode prior to the interrupt is encoded in mstatus.MPP. 
¢ The current pc is copied into the mepc register, and then pc is set to the value specified by 
mtvec as defined by the mtvec.MODE described in Table 19. 


At this point, control is handed over to software in the interrupt handler with interrupts disabled. 
Interrupts can be re-enabled by explicitly setting mstatus.MIE or by executing an MRET instruc- 
tion to exit the handler. When an MRET instruction is executed, the following occurs: 

¢ The privilege mode is set to the value encoded in mstatus.MPP. 

¢ The global interrupt enable, mstatus.MIE, is set to the value of mcause.MPIE. 


¢ The pc is set to the value of mepc. 
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At this point control is handed over to software. 


The Control and Status Registers involved in handling RISC-V interrupts are described in Sec- 
tion 8.3. 


8.3 Interrupt Control Status Registers 


The FE310-G002 specific implementation of interrupt CSRs is described below. For a complete 
description of RISC-V interrupt behavior and how to access CSRs, please consult The RISC-V 
Instruction Set Manual, Volume II: Privileged Architecture, Version 1.10. 


8.3.1 Machine Status Register (mstatus) 


The mstatus register keeps track of and controls the hart’s current operating state, including 
whether or not interrupts are enabled. A summary of the mstatus fields related to interrupts in 
the FE310-G002 is provided in Table 17. Note that this is not a complete description of mstatus 
as it contains fields unrelated to interrupts. For the full description of mstatus, please consult 
the The RISC-V Instruction Set Manual, Volume II: Privileged Architecture, Version 1.10. 


Att 
[ll Resened | wee | SOSOSOSOSOSSOSSSSSCSY 
[Reserved | 


Reserved WN ST = 
WPRE | 


Table 17: FE310-G002 mstatus Register (partial) 





Interrupts are enabled by setting the MIE bit in mstatus and by enabling the desired individual 
interrupt in the mie register, described in Section 8.3.3. 


8.3.2 Machine Trap Vector (mtvec) 


The mtvec register has two main functions: defining the base address of the trap vector, and 
setting the mode by which the FE310-G002 will process interrupts. The interrupt processing 
mode is defined in the lower two bits of the mtvec register as described in Table 19. 


Copyright © 2019, SiFive Inc. All rights reserved. 38 


Machine Trap Vector Register 
CSR mtvec 


Field Name 


[1:0] MODE WARL MODE Sets the interrupt processing mode. 
The encoding for the FE310-G002 supported 
modes is described in Table 19. 

[31:2] BASE[31:2] WARL Interrupt Vector Base Address. Requires 
64-byte alignment. 


Table 18: mtvec Register 





MODE Field Encoding mtvec .MODE 


| Ss Name__| Description 


Direct All exceptions set pc to BASE 


Vectored Asynchronous interrupts set pc to BASE + 4 x 
mcause.EXCCODE. 
22 


Table 19: Encoding of mtvec .MODE 





See Table 18 for a description of the mtvec register. See Table 19 for a description of the 
mtvec.MODE field. See Table 23 for the FE310-G002 interrupt exception code values. 


Mode Direct 


When operating in direct mode all synchronous exceptions and asynchronous interrupts trap to 
the mtvec.BASE address. Inside the trap handler, software must read the mcause register to 
determine what triggered the trap. 


Mode Vectored 


While operating in vectored mode, interrupts set the pc to mtvec. BASE + 4 x exception code. 
For example, if a machine timer interrupt is taken, the pc is set to mtvec.BASE + Ox1C. Typically, 
the trap vector table is populated with jump instructions to transfer control to interrupt-specific 
trap handlers. 


In vectored interrupt mode, BASE must be 64-byte aligned. 
All machine external interrupts (global interrupts) are mapped to exception code of 11. Thus, 


when interrupt vectoring is enabled, the pc is set to address mtvec . BASE + Ox2C for any global 
interrupt. 
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8.3.3. Machine Interrupt Enable (mie) 


Individual interrupts are enabled by setting the appropriate bit in the mie register. The mie regis- 
ter is described in Table 20. 


Machine Interrupt Enable Register 


CSR mie 


Field Name 


Sarees 
Reserved Pa ee 
eee 


Machine External Interrupt Enable 


| _ Reserved | weRi [| 


Table 20: mie Register 


WPRI 





8.3.4 Machine Interrupt Pending (mip) 


The machine interrupt pending (mip) register indicates which interrupts are currently pending. 
The mip register is described in Table 21. 


CSR mip 
| Bits | FieldName | Attr. | Description, 
| (2:0) [| Resewed | WR | 
| 3) | MSIP_ | RO__| Machine Software Interrupt Pending 


| [6:4] | Reseed | wrt | 
| 7 | TIP | ~RO__| Machine Timer InterruptPending 
| [10:8] | Reseed | WIRE | 
| aa | CC MEIP, |= RO__| Machine External Interrupt Pending 
| [34:12] | Resewed | wri | 


Table 21: mip Register 





8.3.5 Machine Cause (mcause) 


When a trap is taken in machine mode, mcause is written with a code indicating the event that 
caused the trap. When the event that caused the trap is an interrupt, the most-significant bit of 
mcause is Set to 1, and the least-significant bits indicate the interrupt number, using the same 
encoding as the bit positions in mip. For example, a Machine Timer Interrupt causes mcause to 
be set to 0x8000_0007. mcause is also used to indicate the cause of synchronous exceptions, in 
which case the most-significant bit of mcause is set to 0. 


See Table 22 for more details about the mcause register. Refer to Table 23 for a list of synchro- 
nous exception codes. 
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Machine Cause Register 
Field Name Attr. 


[9:0] Exception Code WLRL_ | Acode identifying the last exception. 
[30:10] WERE PO 


31 Interrupt WARL 1 if the trap was caused by an interrupt; 0 
otherwise. 


Table 22: mcause Register 





| Interrupt | ExceptionCode |Description 
Reserved 

Reserved 

Pp oO | Instruction address misaligned 
Pp oO | Instruction access fault 
pO | Iilegalinstruction 
po | Breakpoint 
Pp 4 | Load address misaligned 
po | load accessfaut 
Pp OC | Store/AMO address misaligned 
Pp 7 | Store/AMO accessfault 
po OB | Environment call from U-mode 
ee 
PO | Environment call fromM-mode 
P| Ci 12 | Reserved 


Table 23: mcause Exception Codes 





8.4 Interrupt Priorities 


Individual priorities of global interrupts are determined by the PLIC, as discussed in Chapter 10. 
FE310-G002 interrupts are prioritized as follows, in decreasing order of priority: 


¢ Machine external interrupts 
¢ Machine software interrupts 


¢ Machine timer interrupts 
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8.5 Interrupt Latency 


Interrupt latency for the FE310-GO002 is 4 cycles, as counted by the numbers of cycles it takes 
from signaling of the interrupt to the hart to the first instruction fetch of the handler. 


Global interrupts routed through the PLIC incur additional latency of 3 cycles where the PLIC is 
clocked by coreClk. This means that the total latency, in cycles, for a global interrupt is: 4 + 3. 
This is a best case cycle count and assumes the handler is cached or located in ITIM. It does 
not take into account additional latency from a peripheral source. 


Chapter 9 


Core-Local Interruptor (CLINT) 


The CLINT block holds memory-mapped control and status registers associated with software 
and timer interrupts. The FE310-G002 CLINT complies with The RISC-V Instruction Set Manual, 
Volume II: Privileged Architecture, Version 1.10. 


9.1 CLINT Memory Map 
Table 24 shows the memory map for CLINT on SiFive FE310-G002. 


| Address | Width | Attr. | Description | _—=—Notes_— 
msip for hart 0 MSIP Registers (1 bit wide) 


eae Reserved 
saeaar 


mtimecmp for hart 0 | MTIMECMP Registers 


area Reserved 

= 

ReSeETTal a 
0x200c000 —— 


Table 24: CLINT segue eg Map 





9.2 MSIP Registers 


Machine-mode software interrupts are generated by writing to the memory-mapped control reg- 

ister msip. Each msip register is a 32-bit wide WARL register where the upper 31 bits are tied to 
0. The least significant bit is reflected in the MSIP bit of the mip CSR. Other bits in the msip reg- 

ister are hardwired to zero. On reset, each msip register is cleared to zero. 


Software interrupts are most useful for interprocessor communication in multi-hart systems, as 
harts may write each other’s msip bits to effect interprocessor interrupts. 
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9.3 Timer Registers 


mtime is a 64-bit read-write register that contains the number of cycles counted from the rtcclk 
input described in Chapter 13. A timer interrupt is pending whenever mt ime is greater than or 
equal to the value in the mtimecmp register. The timer interrupt is reflected in the mtip bit of the 
mip register described in Chapter 8. 


On reset, mtime is cleared to zero. The mtimecmp registers are not reset. 


Chapter 10 


Platform-Level Interrupt Controller 
(PLIC) 


This chapter describes the operation of the platform-level interrupt controller (PLIC) on the 
FE310-G002. The PLIC complies with The RISC-V Instruction Set Manual, Volume II: Privileged 
Architecture, Version 1.10 and supports 52 interrupt sources with 7 priority levels. 


10.1 Memory Map 


The memory map for the FE310-G002 PLIC control registers is shown in Table 25. The PLIC 
memory map has been designed to only require naturally aligned 32-bit memory accesses. 
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PLIC Register Map 


[address | Width | Attr.| ‘Description | ~~'Notes”~—S—si—i—s~s=s*d 
Toxocoooo00| | [Reed oo | | 
4B | RW | 
Precio 0eee 4B Rv source pitty ___ Soe ea nels 

— information 
source 52 priority 


Sees tees ae FO sao penteney 


See Section 10.4 for more 


rosa orf —[ HO ia wera pOREINGLETTy 


es 2000 Start Hart O M-Mode inter- 
rupt enables 
7 See Section 10.5 for more 


OxO0COO0_2004 | 4B End Hart 0 M-Mode interrupt nermation 
ne ene, 

Ox0C20_0000 | 4B RW | Hart 0 M-Mode priority See Section 10.6 for more 
Cd al ald Fc 
O0x0C20_0004 | 4B RW _ | Hart 0 M-Mode claim/com- See Section 10.7 for more 
Sree eee | LY [ae Em teers 


ae 
roxa00 0000 | | | End of PLIC Memory Map [SSS 


Table 25: SiFive PLIC Register Map. Only naturally aligned 32-bit memory accesses are 
required. 





10.2. Interrupt Sources 


The FE310-G002 has 52 interrupt sources. These are driven by various on-chip devices as 
listed in Table 26. These signals are positive-level triggered. 


In the PLIC, as specified in The RISC-V Instruction Set Manual, Volume II: Privileged Architec- 
ture, Version 1.10, Global Interrupt ID 0 is defined to mean "no interrupt." 
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Source Start | Source End _ 


AON Watchdog 
AON RTC 
UARTO 
UART1 
QSPIO 


| 6 SPI1 


7 SPI2 
39 GPIO 
43 PWMO 
a7 PWM1 
51 PWM2 
| 52 | I2C 


Table 26: PLIC Interrupt Source Mapping 


1 
2 
3 
4 
5 
7 
40 
44 
48 
52 





10.3 Interrupt Priorities 


Each PLIC interrupt source can be assigned a priority by writing to its 32-bit memory-mapped 
priority register. The FE310-G002 supports 7 levels of priority. A priority value of 0 is 
reserved to mean "never interrupt" and effectively disables the interrupt. Priority 1 is the lowest 
active priority, and priority 7 is the highest. Ties between global interrupts of the same priority 
are broken by the Interrupt ID; interrupts with the lowest ID have the highest effective priority. 
See Table 27 for the detailed register description. 


PLIC Interrupt Priority Register (priority) 


Base Address OxO0C00_0000 + 4 x Interrupt ID 


| Bits | Field Name -_| Rst. |Description 


[2:0] Priority Xx Sets the priority for a given global inter- 
rupt. 
[31:3] Reserved | 


Table 27: PLIC Interrupt Priority Registers 





10.4 Interrupt Pending Bits 


The current status of the interrupt source pending bits in the PLIC core can be read from the 
pending array, organized as 2 words of 32 bits. The pending bit for interrupt ID NV is stored in bit 
(N mod 32) of word (NV/32). As such, the FE310-G002 has 2 interrupt pending registers. Bit 
0 of word 0, which represents the non-existent interrupt source O, is hardwired to zero. 


A pending bit in the PLIC core can be cleared by setting the associated enable bit then perform- 
ing a claim as described in Section 10.7. 
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PLIC Interrupt Pending Register 1 (pending1) 


Base Address Ox0CO0O 1000 


Field Name Attr. 
Interrupt O Pend- 


Non-existent global interrupt 0 is hard- 
ing wired to zero 
Interrupt 1 Pend- ponerse | Pending bit for global interrupt 1 
ing 
2 Interrupt 2 Pend- ee Pending bit for global interrupt 2 


ing 


Interrupt 31 Pend- ee Pending bit for global interrupt 31 
ing 


Table 28: PLIC Interrupt Pending Register 1 





PLIC Interrupt Pending Register 2 (pending2) 
Base Address Ox0COO_ 1004 
Field Name Attr. 


al Interrupt 32 Pend- Pending bit for global interrupt 32 
ing 


20 Interrupt 52 Pend- Pending bit for global interrupt 52 
ing 
[31:21] eae 


Table 29: PLIC Interrupt Pending Register 2 





10.5 Interrupt Enables 


Each global interrupt can be enabled by setting the corresponding bit in the enables registers. 
The enables registers are accessed as a contiguous array of 2 x 32-bit words, packed the 
same way as the pending bits. Bit 0 of enable word 0 represents the non-existent interrupt ID 0 
and is hardwired to 0. 


Only 32-bit word accesses are supported by the enables array in SiFive RV32 systems. 
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PLIC Interrupt Enable Register 1 (enable1) for Hart 0 M-Mode 


Base Address Ox0CO0O_ 2000 
Field Name Attr. Description 


Interrupt 1 Enable 
Interrupt 2 Enable 


31 Interrupt 31 RW x Enable bit for global interrupt 31 
Enable 


Table 30: PLIC Interrupt Enable Register 1 for Hart 0 M-Mode 


Enable bit for global interrupt 1 
Enable bit for global interrupt 2 


| Bits | | Rst. | 
Interrupt O Enable Non-existent global interrupt O is hard- 





PLIC Interrupt Enable Register 2 (enable2) for Hart 0 M-Mode 
Base Address Ox0COO_ 2004 
Field Name 


Interrupt 32 RW x Enable bit for global interrupt 32 
Enable 


20 Interrupt 52 
Enable 
[31:21] 


Table 31: PLIC Interrupt Enable Register 2 for Hart 0 M-Mode 





10.6 Priority Thresholds 


The FE310-G002 supports setting of an interrupt priority threshold via the threshold register. 
The threshold is a WARL field, where the FE310-G002 supports a maximum threshold of 7. 


The FE310-G002 masks all PLIC interrupts of a priority less than or equal to threshold. For 
example, a threshold value of zero permits all interrupts with non-zero priority, whereas a 
value of 7 masks all interrupts. 


PLIC Interrupt Priority Threshold Register (threshold) 
Base Address Ox0C20_ 0000 


[2:0] Threshold Sets the priority threshold 


[31:3] | Reserved | RO Le ee 


Table 32: PLIC Interrupt Threshold Register 





10.7 Interrupt Claim Process 


A FE310-G002 hart can perform an interrupt claim by reading the claim/complete register 
(Table 33), which returns the ID of the highest-priority pending interrupt or zero if there is no 
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pending interrupt. A successful claim also atomically clears the corresponding pending bit on 
the interrupt source. 


A FE310-G002 hart can perform a claim at any time, even if the MEIP bit in its mip (Table 21) 
register is not set. 


The claim operation is not affected by the setting of the priority threshold register. 


10.8 Interrupt Completion 


A FE310-G002 hart signals it has completed executing an interrupt handler by writing the inter- 
rupt ID it received from the claim to the claim/comp1lete register (Table 33). The PLIC does not 
check whether the completion ID is the same as the last claim ID for that target. If the comple- 
tion ID does not match an interrupt source that is currently enabled for the target, the completion 
is silently ignored. 
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PLIC Claim/Complete Register (claim) 


Base Address Ox0C20 0004 


[31:0 Interrupt Claim/ RW A read of zero indicates that no inter- 


Complete for Hart rupts are pending. A non-zero read 
0 M-Mode contains the id of the highest pending 
interrupt. A write to this register signals 
completion of the interrupt id written. 





Table 33: PLIC Interrupt Claim/Complete Register for Hart 0 M-Mode 


Chapter 11 


Error Device 


The error device is a TileLink slave that responds to all requests with a TileLink error. It has no 
registers. The entire memory range discards writes and returns zeros on read. Both operation 
acknowledgments carry an error indication. 


The error device serves a dual role. Internally, it is used as a landing pad for illegal off-chip 
requests. However, it also useful for testing software handling of bus errors. 
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Chapter 12 


One-Time Programmable Memory (OTP) 
Peripheral 


This chapter describes the operation of the One-Time Programmable Memory (OTP) Controller. 


Device configuration and power-supply control is principally under software control. The con- 
troller is reset to a state that allows memory-mapped reads, under the assumption that the con- 
troller’s clock rate is between 1 MHz and 37 MHz. vrren is asserted during synchronous reset; 
it is safe to read from OTP immediately after reset if reset is asserted for at least 150 us while 
the controller’s clock is running. 


Programmed-l|/O reads and writes are sequenced entirely by software. 


12.1 Memory Map 


The memory map for the OTP control registers is shown in Table 34. The control-register mem- 
ory map has been designed to only require naturally aligned 32-bit memory accesses. The OTP 
controller also contains a read sequencer, which exposes the OTP’s contents as a read/exe- 
cute-only memory-mapped device. 
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Offset | Name [Description | 


OTP device mode register 
OTP read-voltage regulator control 
OTP write-voltage charge pump control 


Table 34: Register offsets within the OTP Controller memory map 


oO 
OTP device write-enable signal 
m 


OTP read-voltage enable 





12.2 Programmed-l/O lock register (otp_1ock) 


The otp_lock register supports synchronization between the read sequencer and the pro- 
grammed-I/O interface. When the lock is clear, memory-mapped reads may proceed. When the 
lock is set, memory-mapped reads do not access the OTP device, and instead return 0 immedi- 
ately. 


The otp_lock should be acquired before writing to any other control register. Software can 
attempt to acquire the lock by storing 1 to otp_lock. If a memory-mapped read is in progress, 
the lock will not be acquired, and will retain the value 0. Software can check if the lock was suc- 
cessfully acquired by loading otp_lock and checking that it has the value 1. 


After a programmed-l/O sequence, software should restore the previous value of any control 
registers that were modified, then store 0 to otp_lock. 


Listing 1 shows the synchronization code sequence. 


Listing 1: Sequence to acquire and release otp_lock. 


la t0, otp_lock 
li t1, 1 
loop: sw ti, (t0) 
lw t2, (tO) 
beqz t2, loop 
# 
# Programmed I/O sequence goes here. 
# 
sw x0, (tO) 
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12.3 Programmed-lI/O Sequencing 


The programmed-|/O interface exposes the OTP device’s and power-supply’s control signals 
directly to software. Software is responsible for respecting these signals' setup and hold times. 


The OTP device requires that data be programmed one bit at a time and that the result be re- 
read and retried according to a specific protocol. 


See the OTP device and power supply data sheets for timing constraints, control signal descrip- 
tions, and the programming algorithm. 


12.4 Read sequencer control register (otp_rsctr1) 


The read sequence consists of an address-setup phase, a read-pulse phase, and a read-access 
phase. The duration of these phases, in terms of controller clock cycles, is set by a programma- 
ble clock divider. The divider is controlled by the otp_rsctr1 register, the layout of which is 
shown in Table 35. 


The number of clock cycles in each phase is given by 2°°©, and the width of each phase may 
be optionally scaled by 3. That is, the number of controller clock cycles in the address-setup 


phase is given by the expression 2° (1 + 2t,45); the number of clock cycles in the read- 
pulse phase is given by 2°°2/ (1 + 2tpp); and the read-access phase is gecue (1+ 2tracc) 
cycles long. 


Software should acquire the otp_lock prior to modifying otp_rsctrl. 


otp_rsctrl: OTP read sequencer control (otp_rsctr1) 


Register Offset 

Field Name | Attr. [Rst. | Desoription | 
2:0] [ scale 
i 
RW 


erp | Rw | oxo | Read pulse time | 
wijiReseved | | | 


Table 35: otp_rsctrl: OTP read sequencer control 





12.5 OTP Programming Warnings 
Warning: Improper use of the One Time Programmable (OTP) memory may result in a non- 
functional device and/or unreliable operation. 

¢ OTP Memory must be programmed following the procedure outlined below exactly. 


¢ OTP Memory is designed to be programmed or accessed only while coreClk is running 
between 1 MHz and 37 MHz. 
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¢ OTP Memory must be programmed only while the power supply voltages remain within 
specification. 


12.6 OTP Programming Procedure 
1. LOCK the otp: 


a. Write Ox1 to otp_lock 
b. Check that 0x1 is read back from otp_lock. 
c. Repeat this step until Ox1 is read successfully. 


2. SET the programming voltages by writing the following values: 


otp_mrr=0x4 
otp_mpp=0x0 
otp_vppen=0x0 


3. WAIT 20 us for the programming voltages to stabilize. 
4. ADDRESS the memory by setting otp_a. 
5. WRITE one bit at a time: 


a. Set only the bit you want to write high in otp_d 
Bring otp_ck HIGH for 50 us 


c. Bring otp_ck LOW. Note that this means only one bit of otp_d should 
be high at any time. 


6. VERIFY the written bits setting otp_mrr=Ox9 for read margin. 
7. SOAK any verification failures by repeating steps 2-5 using 400 us pulses. 


REVERIFY the rewritten bits setting otp_mrr=OxF. Steps 7,8 may be repeated up to 
10 times before failing the part. 


9. UNLOCK the otp by writing OxO to otp_lock. 


Chapter 13 


Always-On (AON) Domain 


The FE310-G002 supports an always-on (AON) domain that includes real-time counter, a 
watchdog timer, backup registers, low frequency clocking, and reset and power-management 
circuitry for the rest of the system. Figure 5 shows an overview of the AON block. 
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Figure 5: FE310-G002 Always-On Domain 
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13.1 AON Power Source 


The AON domain is continuously powered from an off-chip power source, either a regulated 
power supply or a battery. 


13.2 AON Clocking 


The AON domain is clocked by the low-frequency clock, 1fc1k. The core domain’s Tilelink 
peripheral bus uses the high-frequency coreC1k. A HF-LF power-clock-domain crossing 
(VCDC) bridges between the two power and clock domains. 


An alternative low-frequency clock source can be provided via the aon_lfaltclksel and 
aon_lfaltclk pads. 


13.3 AON Reset Unit 


An AON reset is the widest reset on the FE310-G002, and resets all state except for the JTAG 
debug interface. 


An AON reset can be triggered by an on-chip power-on reset (POR) circuit when power is first 
applied to the AON domain, an external active-low reset pin (erst_n), a debug unit reset 
(ndreset), or expiration of the watchdog timer (wdogrst). 


These sources provide a short initial reset pulse frst, which is extended by a reset stretcher to 
provide the LFROSC reset signal 1froscrst and a longer stretched internal reset, srst. 


The 1froscrst signal is used to initialize the ring oscillator in the LFROSC. This oscillator pro- 
vides 1fclk, which is used to clock the AON. 1fclk is also used as the clock input to mt ime in 
the CLINT. 


The srst strobe is passed to a reset synchronizer clocked by 1fc1k to generate aonrst, an 
asychronous-onset/synchronous-release reset signal used to reset most of the AON block. 


The "mostly off" (MOFF) resets coreclkrst and corerst are generated by the Power Manage- 
ment Unit (PMU) state machine after aonrst is deasserted. 


13.4 Power-On Reset Circuit 


The power-on-reset circuit holds its output low until the voltage in the AON block rises above a 
preset threshold. 
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13.5 External Reset Circuit 


The FE310-G002 can be reset by pulling down on the external reset pin (erst_n), which has a 
weak pullup. An external power-on reset circuit consisting of a resistor and capacitor can be 
provided to generate a sufficiently long pulse to allow supply voltage to rise and then initiate the 
reset stretcher. 


The external reset circuit can include a diode as shown to quickly discharge the capacitor after 
the supply is removed to rearm the external power-on reset circuit. 


A manual reset button can be connected in parallel with the capacitor. 


13.6 Reset Cause 


The cause of an AON reset is latched in the Reset Unit and can be read from the pmucause reg- 
ister in the PMU, as described in Chapter 15. 


13.7 Watchdog Timer (WDT) 


The watchdog timer can be used to provide a watchdog reset function, or a periodic timer inter- 
rupt. The watchdog is described in detail in Chapter 14. 


13.8 Real-Time Clock (RTC) 


The real-time clock maintains time for the system and can also be used to generate interrupts 
for timed wakeup from sleep-mode or timer interrupts during normal operation. The Real-Time 
Clock is described in detail in Chapter 16. 


13.9 Backup Registers 


The backup registers provide a place to store critical data during sleep. The FE310-G002 has 
32 32-bit backup registers. 


13.10 Power-Management Unit (PMU) 


The power-management unit (PMU) sequences the system power supplies and reset signals 
when transitioning into and out of sleep mode. The PMU also monitors AON signals for wakeup 
conditions. The PMU is described in detail in Chapter 15. 


13.11 AON Memory Map 
Table 36 shows the memory map of the AON block. 
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offset | Name [Description ——S 


Table 36: AON Domain Memory Map 
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offset | Name |Description SS 


Banter configurction 
AON Block Configuration Information 


Table 36: AON Domain Memory Map 
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Chapter 14 


Watchdog Timer (WDT) 


The watchdog timer (WDT) is used to cause a full power-on reset if either hardware or software 
errors cause the system to malfunction. The WDT can also be used as a programmable periodic 
interrupt source if the watchdog functionality is not required. The WDT is implemented as an 
upcounter in the Always-On domain that must be reset at regular intervals before the count 
reaches a preset threshold, else it will trigger a full power-on reset. To prevent errant code from 
resetting the counter, the WDT registers can only be updated by presenting a WDT key 
sequence. 
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Figure 6: Watchdog Timer 


14.1 Watchdog Count Register (wdogcount) 


The WDT is based around a 31-bit counter held in wdogcount [30:0]. The counter can be read 
or written over the TileLink bus. Bit 31 of wdogcount returns a zero when read. 
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The counter is incremented at a maximum rate determined by the watchdog clock selection. 
Each cycle, the counter can be conditionally incremented depending on the existence of certain 
conditions, including always incrementing or incrementing only when the processor is not 
asleep. 


The counter can also be reset to zero depending on certain conditions, such as a successful 
write to wdogfeed or the counter matching the compare value. 


14.2 Watchdog Clock Selection 


The WDT unit clock, wdogclk, is driven by the low-frequency clock 1fclk. It runs at approxi- 
mately 32 KHz. 


14.3 Watchdog Configuration Register (wdogcfg) 


Register Offset 
Field Name | Attr. | Ret. 
wdogscale [Rw | x 
Reserved ee 


ae wdogrsten exo | Controls whether the comparator output can set 


the wdogrst bit and hence cause a full reset. 
wdogzerocmp 


X | Reset counter to zero after match. 
[11:10] | Reserved fo Se ee 
wdogenalways | RW 0x@ | Enable Always - run continuously 


= 


RW 


1 wdogcoreawake | RW 0x | Increment the watchdog counter if the processor is 
not asleep 


[27:14] | Reserved 
wdogipe 
[31:29] | Reserved 


X | Interrupt O Pending 


Table 37: wdogcfg: wdog Configuration 


:0 
‘4 
2 
3 
8 


= 


= 
= 





The wdogen* bits control the conditions under which the watchdog counter wdogcount is incre- 
mented. The wdogenalways bit, if set, means the watchdog counter always increments. The 
wdogencoreawake bit, if set, means the watchdog counter increments if the processor core is 
not asleep. The WDT uses the corerst signal from the wakeup sequencer to Know when the 
core is sleeping. The counter increments by one each cycle only if any of the enabled conditions 
are true. The wdogen* bits are reset on AON reset. 


The 4-bit wdogscale field scales the watchdog counter value before feeding it to the compara- 
tor. The value in wdogscale Is the bit position within the wdogcount register of the start of a 
16-bit wdogs field. A value of 0 in wdogscale indicates no scaling, and wdogs would then be 
equal to the low 16 bits of wdogcount. The maximum value of 15 in wdogscale corresponds to 
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dividing the clock rate by 2) so for an input clock of 32.768 kHz, the LSB of wdogs will incre- 
ment once per second. 


The value of wdogs is memory-mapped and can be read as a single 16-bit value over the AON 
TileLink bus. 


The wdogzerocmp bit, if set, causes the watchdog counter wdogcount to be automatically reset 
to zero one cycle after the wdogs counter value matches or exceeds the compare value in 
wdogcemp. This feature can be used to implement periodic counter interrupts, where the period is 
independent of interrupt service time. 


The wdogrsten bit controls whether the comparator output can set the wdogrst bit and hence 
cause a full reset. 


The wdogip® interrupt pending bit can be read or written. 


14.4 Watchdog Compare Register (waogcmp) 


wdogcmp0: Comparator 0 (wdogcmp6) 


Register Offset 


Bits —_| Field Name | Attr. | Ret. | Description 
isi16) [Reseved| | | ——s 


Table 38: wdogcmp0: Comparator 0 





The wdogcmp compare register is a 16-bit value against which the current wdogs value is com- 
pared every cycle. The output of the comparator is asserted whenever the value of wdogs is 
greater than or equal to wdogemp. 


14.5 Watchdog Key Register (wdogkey) 


The wdogkey register has one bit of state. To prevent spurious reset of the WDT, all writes to 
wdogcfg, wdogfeed, wdogcount, wdogcount, wdogemp and wdogipO must be preceded by an 
unlock operation to the wdogkey register location, which sets wdogkey. The value 0x51F15E 
must be written to the wdogkey register address to set the state bit before any write access to 
any other watchdog register. The state bit is reset at AON reset, and after any write to a watch- 
dog register. 


Watchdog registers may be read without setting wdogkey. 
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14.6 Watchdog Feed Address (wdogfeea) 


After a successful key unlock, the watchdog can be fed using a write of the value 0xDO9FOOD to 
the wdogfeed address, which will reset the wdogcount register to zero. The full watchdog feed 
sequence is shown in Listing 2. 

Listing 2: Sequence to reinitialize watchdog. 


li tO, Ox51F15E # Obtain key. 

sw tO, wdogkey # Unlock kennel. 

li t0, OxDO9FOOD # Get some food. 

sw tO, wdogfeed # Feed the watchdog. 


Note there is no state associated with the wdogfeed address. Reads of this address return 0. 


14.7 Watchdog Configuration 


The WDT provides watchdog intervals of up to over 18 hours (65,535 seconds). 


14.8 Watchdog Resets 


If the watchdog is not fed before the wdogcount register exceeds the compare register zero 
while the WDT is enabled, a reset pulse is sent to the reset circuitry, and the chip will go through 
a complete power-on sequence. 


The WDT will be initalized after a full reset, with the wdogrsten and wdogen* bits cleared. 


14.9 Watchdog Interrupts (wdogipo) 


The WDT can be configured to provide periodic counter interrupts by disabling watchdog resets 
(wdogrsten=0) and enabling auto-zeroing of the count register when the comparator fires 
(wdogzerocmp=1). 


The sticky single-bit wdogip® register captures the comparator output and holds it to provide an 
interrupt pending signal. The wdogip register resides in the wdogcfg register, and can be read 
and written over TileLink to clear down the interrupt. 


Chapter 15 


Power-Management Unit (PMU) 


The FE310-G002 power-management unit (PMU) is implemented within the AON domain and 
sequences the system’s power supplies and reset signals during power-on reset and when tran- 
sitioning the "mostly off" (MOFF) block into and out of sleep mode. 
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15.1 PMU Overview 
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Figure 7: FE310-G002 Power-Management Unit 


The PMU is a synchronous unit clocked by the 1fC1k in the AON domain. The PMU handles 
reset, wakeup, and sleep actions initiated by power-on reset, wakeup events, and sleep 
requests. When the MOFF block is powered off, the PMU monitors AON signals to initiate the 
wakeup sequence. When the MOFF block is powered on, the PMU awaits sleep requests from 
the MOFF block, which initiate the sleep sequence. The PMU is based around a simple pro- 
grammable microcode sequencer that steps through short programs to sequence output signals 
that control the power supplies and reset signals to the clocks, core, and pads in the system. 


15.2 Memory Map 


The memory map for the PMU is shown in Table 39. The memory map has been designed to 
only require naturally aligned 32-bit memory accesses. 
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Offset | Name [Description __——*+ 


Table 39: PMU Memory Map 





15.3 PMU Key Register (pmukey) 


The pmukey register has one bit of state. To prevent spurious sleep or PMU program modifica- 
tion, all writes to PMU registers must be preceded by an unlock operation to the pmukey register 
location, which sets pmukey to 1. The value 0x51F15E must be written to the pmukey register 
address to set the state bit before any write access to any other PMU register. The state bit is 
reset at AON reset, and after any write to a PMU register. 


PMU registers may be read without setting pmukey. 


15.4 PMU Program 


The PMU is implemented as a programmable sequencer to support customization and tuning of 
the wakeup and sleep sequences. A wakeup or sleep program comprises eight instructions. An 
instruction consists of a delay, encoded as a binary order of magnitude, and a new value for all 
of the PMU output signals to assume after that delay. The PMU instruction format is shown in 


Table 40. For example, the instruction 0x108 delays for 28 clock cycles, then raises hfclkrst 
and lowers all other output signals. 
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68 


The PMU output signals are registered and only toggle on PMU instruction boundaries. The out- 
put registers are all asynchronously set to 1 by aonrst. 


At power-on reset, the PMU program memories are reset to conservative defaults. Table 41 


shows 


15.5 


PMU Instruction Format (pmu(sleep/wakeup) ix) 
Register Offset 
| Bits | Field Name 


” [Rst_ 


“3 
Drive PMU Output En 1 High 

-8 | nfclkrst | Rw |x| High-Frequency ClockReset_ | 
/9 [isolate | RW | _ x | Isolate MOFF-to-AON Power Domains | 


Table 40: PMU Instruction Format 





the default wakeup program, and Table 42 shows the default sleep program. 


Program instruction | Value [Meaning 
fO——_—~+| Ox SFO | Assert all resets and enable al power supplies 





Table 41: Default PMU wakeup program 


Program Instruction | Value 


Ox2FO 
Ox3FO | Assert hfclkrst 


0x3D0 
0x3C0 
0x3C0 


Table 42: Default PMU sleep program 





Initiate Sleep Sequence Register (pmusicep) 


Writing any value to the pmusleep register initiates the sleep sequence stored in the sleep pro- 


gram memory. The MOFF block will sleep until an event enabled in the pmuie register occurs. 


15.6 


The PMU can be woken by the external dwakeup signal, which is preconditioned by the signal 


Wakeup Signal Conditioning 


conditioning block. 
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The dwakeup signal has a fixed deglitch circuit that requires the dwakeup signal remain asserted 
for two AON clock edges before being accepted. The conditioning circuit also resynchronizes 
the dwakeup signal to the AON 1fclk. 


15.7 PMU Interrupt Enables (pmuic) and Wakeup Cause 
(pmucause) 
The pmuie register indicates which events can wake the MOFF block from sleep. 


The dwakeup bit indicates that a logic 0 on the dwakeup_n pin can rouse MOFF. The rtc bit 
indicates that the RTC comparator can rouse MOFF. 


pmuie: PMU Interrupt Enables (pmuie) 
Register Offset 
| Bits | Field Name | Attr. | Rst.| Description 


[3:0] PMU Interrupt Enables 
[31:4] | Reserved | | | 


Table 43: pmuie: PMU Interrupt Enables 





Following a wakeup, the pmucause register indicates which event caused the wakeup. The 
value in the wakeupcause field corresponds to the bit position of the event in pmuie, e.g., a 
value of 2 indicates dwakeup. The value 0 indicates a wakeup from reset. These causes are 
shown in Table 45. 


In the event of a wakeup from reset, the resetcause field indicates which reset source triggered 
the wakeup. Table 46 lists the values the resetcause field may take. The value in resetcause 
persists until the next reset. 


pmucause: PMU Wakeup Cause (pmucause) 
Register Offset 


Bits _| Field Name | Att. 
(21:0) [ pmucause [ro | x | PMU Wakeup Cause 


Table 44: pmucause: PMU Wakeup Cause 





Digitial input wakeup (dwakeup) 





[ Index | 
fo | 


Table 45: Wakeup cause values 
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[Index | Meaning 
|0 | Power-on Reset___| 


External reset 
Watchdog timer reset 


Table 46: Reset cause values 
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Chapter 16 


Real-Time Clock (RTC) 


The real-time clock (RTC) is located in the always-on domain, and is clocked by a selectable 
low-frequency clock source. For best accuracy, the RTC should be driven by an external 
32.768 kHz watch crystal oscillator, but to reduce system cost, can be driven by a factory- 
trimmed on-chip oscillator. 






AON TileLink 


Figure 8: Real-Time Clock 


16.1 RTC Count Registers (rtccounthilrtccount1lo) 


The real-time counter is based around the rtccounthi/rtccount1lo register pair, which incre- 
ment at the low-frequency clock rate when the RTC is enabled. The rtccount1lo register holds 
the low 32 bits of the RTC, while rtccounthi holds the upper 16 bits of the RTC value. The 
total >48-bit counter width ensures there will no counter rollover for over 270 years assuming a 
32.768 kHz low-frequency real-time clock source. The counter registers can be read or written 
over the TileLink bus. 
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rtccounthi: High bits of Counter (rtccounthi) 


Register Offset Ox4C 


Field Name | Attr. | Rst. | Description 
[31:0] High bits of Counter 


Table 47: rtccounthi: High bits of Counter 





[Field Name | Attr. [ Ret. | Description 
(31-0) 


Table 48: rtccountlo: Low bits of Counter 





16.2 RTC Configuration Register (rtccfg) 


Bits | Field Name | attr. [Rst. | Description 


ia] [Resevedn| SSCS 
rij [Reseved | | | SY 
ae 





| [31:29] |Resewed | | | 


Table 49: rtccfg: rtc Configuration 


The rtcenalways bit controls whether the RTC is enabled, and is reset on AON reset. 


The 4-bit rtcscale field scales the real-time counter value before feeding to the real-time inter- 
rupt comparator. The value in rtcscale is the bit position within the rtccountlo/rtccounthi 
register pair of the start of a 32-bit field rtcs. A value of 0 in rtcscale indicates no scaling, and 
rtcs would then be equal to rtclo. The maximum value of 15 in rtcscale corresponds to 
dividing the clock rate by 2) | so for an input clock of 32.768 kHz, the LSB of rtcs will incre- 
ment once per second. The value of rtcs is memory-mapped and can be read as a single 
32-bit register over the AON TileLink bus. 


16.3 RTC Compare Register (rtccmp) 


The rtccmp register holds a 32-bit value that is compared against rtcs, the scaled real-time 
clock counter. If rtcs is greater than or equal to rtccmp, the rtccmpip interrupt pending bit is 
set. The rtccmpip interrupt pending bit is read-only. The rtccmpip bit can be cleared down by 
writing a value to rtccmp that is greater than rtcs. 
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rtccmp0: Comparator 0 (rtccmpo) 
Register Offset 
Field Name 





Rt. | 


Table 50: rtccmp0: Comparator 0 
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Chapter 17 


General Purpose Input/Output Controller 
(GPIO) 


This chapter describes the operation of the General Purpose Input/Output Controller (GPIO) on 
the FE310-G002. The GPIO controller is a peripheral device mapped in the internal memory 
map. It is responsible for low-level configuration of actual GPIO pads on the device (direction, 
pull up-enable, and drive value ), as well as selecting between various sources of the controls 
for these signals. The GPIO controller allows separate configuration of each of ngpio GPIO bits. 


Figure 9 shows the control structure for each pin. 


Atomic operations such as toggles are natively possible with the RISC-V 'A' extension. 
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Figure 9: Structure of a single GPIO Pin with Control Registers. This structure is repeated for 


each pin. 
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17.1 GPIO Instance in FE310-G002 


FE310-G002 contains one GPIO instance. Its address and parameters are shown in Table 51. 


instance Number 
ro —*ex19012000| 32 _| 


Table 51: GPIO Instance 


17.2 Memory Map 


The memory map for the GPIO control registers is shown in Table 52. The GPIO memory map 
has been designed to require only naturally-aligned 32-bit memory accesses. Each register is 
ngpio bits wide. 


Offset | Name | Description | 
Texi0 | pue | Internal pull-up enable™ | 


Table 52: GPIO Peripheral Register Offsets. Only naturally aligned 32-bit memory accesses 
are supported. Registers marked with an * are asynchronously reset to O. All other registers are 
synchronously reset to 0. 





17.3 Input / Output Values 


The GPIO can be configured on a bitwise fashion to represent inputs and/or outputs, as set by 
the input_en and output_en registers. Writing to the output_val register updates the bits 
regardless of the tristate value. Reading the output_val register returns the written value. 
Reading the input_val register returns the actual value of the pin gated by input_en. 
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17.4 Interrupts 


A single interrupt bit can be generated for each GPIO bit. The interrupt can be driven by rising 
or falling edges, or by level values, and interrupts can be enabled for each GPIO bit individually. 


Inputs are synchronized before being sampled by the interrupt logic, so the input pulse width 
must be long enough to be detected by the synchronization logic. 


To enable an interrupt, set the corresponding bit in the rise_ie and/or fall_ie to 1. If the cor- 
responding bit in rise_ip or fall_ip is set, an interrupt pin is raised. 


Once the interrupt is pending, it will remain set until a 1 is written to the *_ip register at that bit. 


The interrupt pins may be routed to the PLIC or directly to local interrupts. 


17.5 Internal Pull-Ups 


When configured as inputs, each pin has an internal pull-up which can be enabled by software. 
At reset, all pins are set as inputs, and pull-ups are disabled. 


17.6 Drive Strength 


When configured as output, each pin has a software-controllable drive strength. 


17.7 Output Inversion 


When configured as an output (either software or IOF controlled), the software-writable out_xor 
register is combined with the output to invert it. 


17.8 HW I/O Functions (IOF) 


Each GPIO pin can implement up to 2 HW-Driven functions (IOF) enabled with the iof_en reg- 
ister. Which IOF is used is selected with the iof_sel register. 


When a pin is set to perform an IOF, it is possible that the software registers port, output_en, 
pullup, ds, input_en may not be used to control the pin directly. Rather, the pins may be con- 
trolled by hardware driving the IOF. Which functionalities are controlled by the IOF and which 
are controlled by the software registers are fixed in the hardware on a per-IOF basis. Those that 
are not controlled by the hardware continue to be controlled by the software registers. 


If there is no IOFx for a pin configured with IOFx, the pin reverts to full software control. 
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GPIO Number | 1OFO 1OF1 


PWMO_PWMO 
PWMO_PWM1 


PWMO_PWM2 
PWMO_PWM3 
7 
10 PWM2_PWMO 
cel | | PWM2_ PWM1 
12 PWM2_PWM2 
13 PWM2_PWM3 
14 aes) 
15 ell 
16 
17 
18 

19 | | PWM PWM1 
20 | S| PWM1_ PWMO 
Pal | sd PWM PWM 
22 | sd] PWM PWM 


—— 
a 
a a 
= aa 
a a 
P= 10= 
a ae 
a 
[ae S| 
a ee 
Ep is 
= ee = Se 
ae 
| ak 
| 19 
| 20 
Lat — | 
a ie 


23 UART1_RX 


NOTIN 
ol; 


eres! 
26 
27 
28 
29 
30 
31 


Table 53: GPIO IOF Mapping 
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Chapter 18 


Universal Asynchronous Receiver! 
Transmitter (UART) 


This chapter describes the operation of the SiFive Universal Asynchronous Receiver/Transmit- 
ter (UART). 


18.1 UART Overview 
The UART peripheral supports the following features: 


¢ 8-N-1 and 8-N-2 formats: 8 data bits, no parity bit, 1 start bit, 1 or 2 stop bits 
¢ 8-entry transmit and receive FIFO buffers with programmable watermark interrupts 
¢ 16x Rx oversampling with 2/3 majority voting per bit 


The UART peripheral does not support hardware flow control or other modem control signals, or 
synchronous serial data transfers. 


18.2 UART Instances in FE310-G002 


FE310-G002 contains two UART instances. Their addresses and parameters are shown in 
Table 54. 


Instance Num- Address div_width | div_init TX FIFO RX FIFO 
ber Depth Depth 





[0 fexiserseo| 16 | 3 
[1 Toxssszso00[ 16 | 3 |e | 8 | 


Table 54: UART Instances 
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18.3 Memory Map 


The memory map for the UART control registers is shown in Table 55. The UART memory map 
has been designed to require only naturally aligned 32-bit memory accesses. 


Offset | Name | Description 


Table 55: Register offsets within UART memory map 





18.4 Transmit Data Register (txdata) 


Writing to the txdata register enqueues the character contained in the data field to the transmit 
FIFO if the FIFO is able to accept new entries. Reading from txdata returns the current value of 
the full flag and zero in the data field. The full flag indicates whether the transmit FIFO is 
able to accept new entries; when set, writes to data are ignored. A RISC-V amoor .w instruction 
can be used to both read the full status and attempt to enqueue data, with a non-zero return 
value indicating the character was not accepted. 


Transmit Data Register (txdata) 
Register Offset 
| Bits | Field Name 


ttr. | Rst. | 
ata 
|| 


Reseved| | | 
full [RO | x | Transmit FIFO fall 


Table 56: Transmit Data Register 





18.5 Receive Data Register (rxdata) 


Reading the rxdata register dequeues a character from the receive FIFO and returns the value 
in the data field. The empty flag indicates if the receive FIFO was empty; when set, the data 
field does not contain a valid character. Writes to rxdata are ignored. 
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Receive Data Register (rxdata) 
Register Offset 
| Bits | Field Name | Attr. | Rst.| Description | 


rio] [data [ro |x| Received data 
soe] [Resened} | | 
P31 empty [Ro | x] Receive FIFO empiy | 


Table 57: Receive Data Register 





18.6 Transmit Control Register (txctr1) 


The read-write txctr1 register controls the operation of the transmit channel. The txen bit con- 
trols whether the Tx channel is active. When cleared, transmission of Tx FIFO contents is sup- 
pressed, and the txd pin is driven high. 


The nstop field specifies the number of stop bits: © for one stop bit and 1 for two stop bits. 
The txcnt field specifies the threshold at which the Tx FIFO watermark interrupt triggers. 


The txctr1 register is reset to 0. 


Register Offset 
Bits | Field Name | Attr. | Rst. | Description | 


nstop 


Resened| | | 
eui9)[Resenedn| | | CS 


Table 58: Transmit Control Register 





18.7 Receive Control Register (rxctr1) 


The read-write rxctr1 register controls the operation of the receive channel. The rxen bit con- 
trols whether the Rx channel is active. When cleared, the state of the rxd pin is ignored, and no 
characters will be enqueued into the Rx FIFO. 


The rxcnt field specifies the threshold at which the Rx FIFO watermark interrupt triggers. 


The rxctr1 register is reset to 0. Characters are enqueued when a Zero (low) start bit is seen. 
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Receive Control Register (rxctr1) 
Register Offset 
Field Name | Attr. | Rst.| Description 


Bits 

ro [rxen [RW | oxo | Receive enable 
fis] [Reseweg| | | 
eni9) [Resevegt | | 


Table 59: Receive Control Register 





18.8 Interrupt Registers (ip and ie) 


The ip register is a read-only register indicating the pending interrupt conditions, and the read- 
write ie register controls which UART interrupts are enabled. ie is reset to 0. 


The txwm condition becomes raised when the number of entries in the transmit FIFO is strictly 
less than the count specified by the txcnt field of the txctr1 register. The pending bit is 
cleared when sufficient entries have been enqueued to exceed the watermark. 


The rxwm condition becomes raised when the number of entries in the receive FIFO is strictly 
greater than the count specified by the rxcnt field of the rxctr1 register. The pending bit is 
cleared when sufficient entries have been dequeued to fall below the watermark. 


UART Interrupt Enable Register (ie) 
Register Offset 
Field Name 


Bits _| 7 
05 
aie 


1 Receive watermark interrupt enable 


[31:2] [Reserved | | [| 


Table 60: UART Interrupt Enable Register 





Register Offset 
Bits | Field Name | attr. [Rst. | Description SCS 
es 


Receive watermark interrupt pending 





PRO | 
1 rxwm |RO | 
Weal) 


[31:2] | Reserved 
Table 61: UART Interrupt Pending Register 


18.9 Baud Rate Divisor Register (aiv) 


The read-write, div_width-bit div register specifies the divisor used by baud rate generation 
for both Tx and Rx channels. The relationship between the input clock and baud rate is given by 
the following formula: 
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fin 

baud = WW 
Poa div+1 

The input clock is the bus clock tlclk. The reset value of the register is set to div_init, which 


is tuned to provide a 115200 baud output out of reset given the expected frequency of t1clk. 


Table 62 shows divisors for some common core clock rates and commonly used baud rates. 
Note that the table shows the divide ratios, which are one greater than the value stored in the 
div register. 


Paso] caf azo fo 
[ae [Cato | saz SSCS~Ctazs 
[as [250000 | 6a | —~—~SC so fo 
[00 [SCs | e400 | ——~S~«aS TO 


[200 250000 | 800] 2500000 
[38a ——saazso| azzes|——saazso fo 
[eas 0000 | asa6 | ———as0000 [0 


Table 62: Common baud rates (MIDI=31250, DMX=250000) and required 
divide values to achieve them with given bus clock frequencies. The divide val- 
ues are one greater than the value stored in the div register. 





The receive channel is sampled at 16x the baud rate, and a majority vote over 3 neighboring 
bits is used to determine the received value. For this reason, the divisor must be 216 fora 
receive channel. 


Baud Rate Divisor Register (div) 
Register Offset 


Bits Field Attr. Description 
Name 


value is div_init. 


|[31:16) |Reseed{ |p 


Table 63: Baud Rate Divisor Register 


Baud rate divisor. div_width bits wide, and the reset 





Chapter 19 


Serial Peripheral Interface (SPI) 


This chapter describes the operation of the SiFive Serial Peripheral Interface (SPI) controller. 


19.1 SPI Overview 


The SPI controller supports master-only operation over the single-lane, dual-lane, and quad- 
lane protocols. The baseline controller provides a FIFO-based interface for performing pro- 
grammed I/O. Software initiates a transfer by enqueuing a frame in the transmit FIFO; when the 
transfer completes, the slave response is placed in the receive FIFO. 


In addition, a SPI controller can implement a SPI flash read sequencer, which exposes the 
external SPI flash contents as a read/execute-only memory-mapped device. Such controllers 
are reset to a state that allows memory-mapped reads, under the assumption that the input 
clock rate is less than 100 MHz and the external SPI flash device supports the common Win- 
bond/Numonyx serial read (0x03) command. Sequential accesses are automatically combined 
into one long read command for higher performance. 


The fctrl register controls switching between the memory-mapped and programmed-|/O 
modes, if applicable. While in programmed-I/O mode, memory-mapped reads do not access the 
external SPI flash device and instead return 0 immediately. Hardware interlocks ensure that the 
current transfer completes before mode transitions and control register updates take effect. 


19.2 SPl Instances in FE310-G002 


FE310-G002 contains three SPI instances. Their addresses and parameters are shown in Table 
64. 
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instance | Flash Controller 
QSPIO 010014000 


SPI 1 0x10024000 
SPI 2 0x10034000 


Table 64: SPI Instances 





19.3 Memory Map 


The memory map for the SPI control registers is shown in Table 65. The SPI memory map has 
been designed to require only naturally-aligned 32-bit memory accesses. 
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| Offset | Name | Description 
| oxos| Reserved] 
[oxoc|Resewed| S—~SCS 
oxic | Reserved | 
ox2o0|Reseved| 
ox24 | Reseed | 
oxso | Reserved | 
ox34 |Reseved| 
oxsa | Reserved | 
oxsc | Reseed | 
ax4o | Fmt 
ox58 | Reseed | 
oxsc | Reserved | 
0x60 | fctrl 
axed | Ffmt 
ox6a | Reserved | 

ox6c | Reseed | 

0x74 SPI interrupt pending 

Table 65: Register offsets within the SPI memory map. Registers marked * are present only on 

controllers with the direct-map flash interface. 





19.4 Serial Clock Divisor Register (sckdiv) 


The sckdiv Is a div_width-bit register that specifies the divisor used for generating the serial 
clock (SCK). The relationship between the input clock and SCK is given by the following for- 
mula: 


_ fin 
feck SS ei ae Gt 
2(div + 1) 
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The input clock is the bus clock tlclk. The reset value of the div field is 0x3. 


Serial Clock Divisor Register (sckdiv) 
Register Offset 


| Bits | Field Name Rst. 
[11:0] Divisor for serial clock. div_width bits wide. 
[s112]| Reseed | | | 


Table 66: Serial Clock Divisor Register 





19.5 Serial Clock Mode Register (sckmode) 


The sckmode register defines the serial clock polarity and phase. Table 68 and Table 69 
describe the behavior of the pol and pha fields, respectively. The reset value of sckmode is 0. 


Serial Clock Mode Register (sckmode) 
Register Offset 
| Bits | FieldName | Attr. | Rst.| Description | 


1 
Reserved | | | 
Table 67: Serial Clock Mode Register 





|__| Inactive state of SCK is logical 0 


Inactive state of SCK is logical 1 
Table 68: Serial Clock Polarity 


Data is sampled on the leading edge of SCK and shifted on the trailing edge of SCK 





Data is shifted on the leading edge of SCK and sampled on the trailing edge of SCK 
Table 69: Serial Clock Phase 





19.6 Chip Select ID Register (csia) 


The csid is a logs (cs_width)-bit register that encodes the index of the CS pin to be toggled 
by hardware chip select control. The reset value is 0x0. 
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Chip Select ID Register (csid) 
Register Offset 


| Bits | FieldName | Attr. | Rst.| Description 
Chip select ID. logs (cs_width) bits wide. 


Table 70: Chip Select ID Register 





19.7 Chip Select Default Register (csaer) 


The csdef register is a cs_width-bit register that specifies the inactive state (polarity) of the CS 
pins. The reset value is high for all implemented CS pins. 


Chip Select Default Register (csdef) 
Register Offset 


Field Description 
Name 
[31:0] Chip select default value. cs_width bits wide, reset to 
all-1s. 


Table 71: Chip Select Default Register 





19.8 Chip Select Mode Register (csmode) 


The csmode register defines the hardware chip select behavior as described in Table 72. The 
reset value is 0x0 (AUTO). In HOLD mode, the CS pin is deasserted only when one of the fol- 
lowing conditions occur: 

¢ A different value is written to csmode or csid. 

¢ Awrite to csdef changes the state of the selected pin. 


¢ Direct-mapped flash mode is enabled. 


Chip Select Mode Register (csmode) 
Register Offset 
Description 


[1:0] | mode | Chip select mode 
[31:2] aaa 





Table 73: Chip Select Modes 
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19.9 Delay Control Registers (de1ayo and delay1) 


The delayo and delay1 registers allow for the insertion of arbitrary delays specified in units of 
one SCK period. 


The cssck field specifies the delay between the assertion of CS and the first leading edge of 
SCK. When sckmode. pha = 0, an additional half-period delay is implicit. The reset value is 0x1. 


The sckcs field specifies the delay between the last trailing edge of SCK and the deassertion of 
CS. When sckmode. pha = 1, an additional half-period delay is implicit. The reset value is 0x1. 


The intercs field specifies the minimum CS inactive time between deassertion and assertion. 
The reset value is 0x1. 


The interxfr field specifies the delay between two consecutive frames without deasserting 
CS. This is applicable only when sckmode is HOLD or OFF. The reset value is 0x0. 


Delay Control Register 0 (delayo) 
Register Offset 
|Bits | Field Name | Attr. | Rst. | Description 


cssck 
Resend) | | 
sokes 
Resend) |] 


Table 74: Delay Control Register 0 





Delay Control Register 1 (delay1) 
Register Offset 
| Bits | Field Name | Attr. | Rst.| Description 


ss] [Reseved| | | 
rau24)[Reseved | | | CS 


Table 75: Delay Control Register 1 





19.10 Frame Format Register (Fmt) 


The fmt register defines the frame format for transfers initiated through the programmed-|/O 
(FIFO) interface. Table 77, Table 78, and Table 79 describe the proto, endian, and dir fields, 
respectively. The len field defines the number of bits per frame, where the allowed range is 0 to 
8 inclusive. 
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For flash-enabled SPI controllers, the reset value is 0x0008_0008, corresponding to proto = 
single, dir = Tx, endian = MSB, and len = 8. For non-flash-enabled SPI controllers, the reset 
value is 0x0008_0000, Corresponding to proto = single, dir = Rx, endian = MSB, and len =8. 


Frame Format Register (fmt) 
Register Offset 


Field Attr Description 
Name 


endian 
controllers, O otherwise. 
Reserved | |] 
W 


len 
Reovea] | | SSCS 


Table 76: Frame Format Register 





P| Single | DQ0 (OSI), DOT (MISO). 


Table 77: SPI Protocol. Unused DQ pins are tri-stated. 





| | Transmit most-significant bit (MSB) first 
Transmit least-significant bit (LSB) first 


Table 78: SPI Endianness 





Rx: For dual and quad protocols, the DQ pins are tri-stated. For the single protocol, 


the DQO pin is driven with the transmit data as normal. 


Tx: The receive FIFO is not populated. 


Table 79: SPI I/O Direction 





19.11 Transmit Data Register (txaata) 


Writing to the txdata register loads the transmit FIFO with the value contained in the data field. 
For fmt . len < 8, values should be left-aligned when fmt .endian = MSB and right-aligned 
when fmt .endian = LSB. 
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The full flag indicates whether the transmit FIFO is ready to accept new entries; when set, 
writes to txdata are ignored. The data field returns 0x0 when read. 


Transmit Data Register (txdata) 
Register Offset 
| Bits | Field Name 


| Rst. | Description _| 
: fis Sse tee 


Table 80: Transmit Data Register 





19.12 Receive Data Register (rxdata) 


Reading the rxdata register dequeues a frame from the receive FIFO. For fmt .len < 8, values 
are left-aligned when fmt .endian = MSB and right-aligned when fmt .endian = LSB. 


The empty flag indicates whether the receive FIFO contains new entries to be read; when set, 
the data field does not contain a valid frame. Writes to rxdata are ignored. 


Receive Data Register (rxdata) 


| Bits | Field Name 
data 
Reserved ae ere 
empty 


Table 81: Receive Data Register 





19.13 Transmit Watermark Register (txmark) 


The txmark register specifies the threshold at which the Tx FIFO watermark interrupt triggers. 
The reset value is 1 for flash-enabled SPI controllers, and 0 for non-flash-enabled SPI con- 
trollers. 


Field Attr Description 
ee Ngan, ee 
Transmit watermark. The reset value is 1 for flash-enabled 


controllers, O otherwise. 


txmark RW 
[31:3] [Reserved] | |  — — *&| 


Table 82: Transmit Watermark Register 
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19.14 Receive Watermark Register (rxmark) 
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The rxmark register specifies the threshold at which the Rx FIFO watermark interrupt triggers. 


The reset value is 0x0. 


Receive Watermark Register (rxmark) 
Register Offset 


Bits | Field Name | Attr. | Rt 
20) 
era] [Reseved | | | 





Table 83: Receive Watermark Register 


19.15 SPI Interrupt Registers (ie and ip) 


The ie register controls which SPI interrupts are enabled, and ip is a read-only register indicat- 


ing the pending interrupt conditions. ie is reset to zero. See Table 84. 


The txwm condition becomes raised when the number of entries in the transmit FIFO is strictly 


less than the count specified by the txmark register. The pending bit is cleared when sufficient 


entries have been enqueued to exceed the watermark. See Table 85. 


The rxwm condition becomes raised when the number of entries in the receive FIFO is strictly 
greater than the count specified by the rxmark register. The pending bit is cleared when suffi- 
cient entries have been dequeued to fall below the watermark. See Table 85. 


SPI Interrupt Enable Register (ie) 
Register Offset 
Field Name 


rxwm 


Table 84: SPI Interrupt Enable Register 


Bits | "[Rst. | Description | 
Reseed) | [| SS 





SPI Watermark Interrupt Pending Register (ip) 
Register Offset 
Field Name |Rst.| Description 


i Receive watermark pending 
[31:2] | Reserved en Ree 


Table 85: SPI Watermark Interrupt Pending Register 





Bits — attr 
0 [eum | RO__| 0x0 | Transmit watermark pending 
fate Ro 

al 
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19.16 SPI Flash Interface Control Register (fctr1) 


When the en bit of the fctr1 register is set, the controller enters direct memory-mapped SPI 
flash mode. Accesses to the direct-mapped memory region causes the controller to automati- 
cally sequence SPI flash reads in hardware. The reset value is 0x1. See Table 86. 


SPI Flash Interface Control Register (fctr1) 


Register Offset 0x60 


Field Name | Attr. | Rst. | Description 
fen —«| Rw__| 0x1 | SPI Flash Mode Select 
[si:aj|Reseved | | | 


Table 86: SPI Flash Interface Control Register 





19.17 SPI Flash Instruction Format Register (fmt) 


The ffmt register defines the format of the SPI flash read instruction issued by the controller 
when the direct-mapped memory region is accessed while in SPI flash mode. 


An instruction consists of a command byte followed by a variable number of address bytes, 
dummy cycles (padding), and data bytes. Table 87 describes the function and reset value of 
each field. 


SPI Flash Instruction Format Register (ffmt) 
Register Offset 0x64 
Field Name | Attr. 


| Bits 
ie Oe. |] cmd_en RW 


addr_len RW 
pad_cnt RW 
9:8 
1:1 


Description 

0x1 | Enable sending of command 

0x3 | Number of address bytes (0 to 4) 

0x0 | Number of dummy cycles 

0x0 | Protocol for transmitting command 

0x0 | Protocol for transmitting address and padding 
RW 0x0 | Protocol for receiving data bytes 


RW 


cmd_proto 
[11:10] | addr_proto | RW 


[13:12] | data_proto 
[15:14] | Reserved 


[23:16] | cmd_code RW 0x3 | Value of command byte 
[31:24] | pad_code RW 0x® | First 8 bits to transmit during dummy cycles 


Table 87: SPI Flash Instruction Format Register 





Chapter 20 


Pulse Width Modulator (PWM) 


This chapter describes the operation of the Pulse-Width Modulation peripheral (PWM). 


20.1 PWM Overview 


Figure 10 shows an overview of the PWM peripheral. The default configuration described here 
has four independent PWM comparators (pwmcmp0—pwmcmp3), but each PWM Peripheral is 
parameterized by the number of comparators it has (ncmp). The PWM block can generate multi- 
ple types of waveforms on output pins (pwmX gpio) and can also be used to generate several 
forms of internal timer interrupt. The comparator results are captured in the pwmcmp.X ip flops 
and then fed to the PLIC as potential interrupt sources. The pwmcmp.X ip outputs are further 
processed by an output ganging stage before being fed to the GPIOs. 


PWM instances can support comparator precisions (cmpwidth) up to 16 bits, with the example 
described here having the full 16 bits. To support clock scaling, the pwmcount register is 15 bits 
wider than the comparator precision cmpwidth. 
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Figure 10: PWM Peripheral 


20.2 PWM Instances in FE310-G002 


FE310-G002 contains three PWM instances. Their addresses and parameters are shown in 
Table 88. 


Instance Number | Address | nemp | cmpwidth 


Table 88: PWM Instances 





20.3 PWM Memory Map 


The memory map for the PWM peripheral is shown in Table 89. 
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Offset | Name [Description 
Toxoa [Reseed] 
exec [Reseed] 


PWM 0 compare register 


Table 89: SiFive PWM memory map, offsets relative to PWM peripheral base address 


| oxis |Reserved | 





20.4 PWM Count Register (pwmcount) 


The PWM unit is based around a counter held in pwmcount. The counter can be read or written 
over the TileLink bus. The pwmcount register is (15 + empwidth) bits wide. For example, for 
cmpwidth of 16 bits, the counter is held in pwmcount [30:0], and bit 31 of pwmcount returns a 

zero when read. 


When used for PWM generation, the counter is normally incremented at a fixed rate then reset 
to zero at the end of every PWM cycle. The PWM counter is either reset when the scaled 
counter pwms reaches the value in pwmcmp®, or is simply allowed to wrap around to zero. 


The counter can also be used in one-shot mode, where it disables counting after the first reset. 


PWM Count Register (pwmcount) 
Register Offset 


|Bits_| FieldName | Attr. | Rst.| Description 
[30:0] PWM count register. cmpwidth + 15 bits wide. 
| 31 TT 


Table 90: PWM Count Register 





Copyright © 2019, SiFive Inc. All rights reserved. 97 


20.5 PWM Configuration Register (pwmctg) 


PWM Configuration Register (pwmcfg) 
Register Offset 
Field Name 


pwmscale PWM Counter scale 
Reserved 


pwmsticky 
pwmzerocmp 


ewe 
eee 
| | pwmdeglitch 
Loi | 


— 
— 


BLO 


NI} 0 


PWM Sticky - disallow clearing pwmcmpX ip bits 

PWM Zero - counter resets to zero after match 

PWM Deglitch - latch pwmcmp.X ip within same 
cycle 


PWM enable always - run continuously 
PWM enable one shot - run one cycle 


a aaa ae 
a 
= 


X | PWM0/PWM1 Compare Gang 


10 
11 Reserved 
pwmenalways 
pwmenoneshot 
[15:14] | Reserved 
wmcmpOcenter 
5 
8 
0 
i 


ne) 


wmcmp2center 
pwmcmp3center 


[23:20] | Reserved 


4 


ne) 


wmcmpOgang 


ne) 


wmcmpigang 


wmcmp2gang 


xe) 


wmcmp3gang 
wmcmp0ip 
9 wmcmp1ip 


wmemp2ip 
pwmcmp3ip 


Table 91: PWM Configuration Register 


ne) 





| Attr. | 
a 
= 
aaa 
wmcmpicenter 
ae 


The pwmcfg register contains various control and status information regarding the PWM periph- 
eral, as shown in Table 91. 


The pwmen* bits control the conditions under which the PWM counter pwmcount is incremented. 
The counter increments by one each cycle only if any of the enabled conditions are true. 


If the pwmenalways bit is set, the PWM counter increments continuously. When pwmenoneshot 
is set, the counter can increment but pwmenoneshot is reset to zero once the counter resets, 
disabling further counting (unless pwmenalways is set). The pwmenoneshot bit provides a way 
for software to generate a single PWM cycle then stop. Software can set the pwmenoneshot 
again at any time to replay the one-shot waveform. The pwmen* bits are reset at wakeup reset, 
which disables the PWM counter and saves power. 
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The 4-bit pwmscale field scales the PWM counter value before feeding it to the PWM compara- 


tors. The value in pwmscale is the bit position within the pwmcount register of the start of a 


cmpwidth-bit pwms field. A value of 0 in pwmscale indicates no scaling, and pwms would then be 


equal to the low cmpwidth bits of pwmcount. The maximum value of 15 in pwmscale corre- 


sponds to dividing the clock rate by 215 so for an input bus clock of 16 MHz, the LSB of pwms 
will increment at 488.3 Hz. 


The pwmzerocmp bit, if set, causes the PWM counter pwmcount to be automatically reset to zero 
one cycle after the pwms counter value matches the compare value in pwmcmp®. This is normally 


used to set the period of the PWM cycle. This feature can also be used to implement periodic 
counter interrupts, where the period is independent of interrupt service time. 


20.6 Scaled PWM Count Register (pwns) 


The Scaled PWM Count Register pwms reports the cmpwidth-bit portion of pwmcount which 
starts at pwmscale, and is what is used for comparison against the pwmcmp registers. 


Scaled PWM Count Register (pwms) 
Register Offset 


Field Name | Attr. | Rst. | Description 
15:0] Scaled PWM count register. cmpwidth bits wide. 
[31:16] TT 


Table 92: Scaled PWM Count Register 





20.7 PWM Compare Registers (pwmcmpo—pwmemp3) 


Bits —_| Field Name | attr. [Rst. | Description | 
sii] [Resevedi] [| SSS 


Table 93: PWM 0 Compare Register 





PWM 1 Compare Register (pwmcmp1) 
Register Offset 


Bits —_| Field Name | Attr. | Ret] 
sie) pReseved| | | 


Table 94: PWM 1 Compare Register 
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PWM 2 Compare Register (pwmcmp2) 
Register Offset 


Field Name | Attr. [ Ret. | Description | 
15.0 PWM 2 Compare Value 
isii6) [Reseved | | | 


Table 95: PWM 2 Compare Register 





PWM 3 Compare Register (pwmcmp3) 
Register Offset 


attr. [ Ret. 
15.0 
sie] [Reseved] [| SSS 


Table 96: PWM 3 Compare Register 





The primary use of the ncmp PWM compare registers is to define the edges of the PWM wave- 
forms within the PWM cycle. 


Each compare register is a cmpwdith-bit value against which the current pwms value is com- 
pared every cycle. The output of each comparator is high whenever the value of pwms is greater 
than or equal to the corresponding pwmcmp.X. 


If the pwmzerocomp bit is set, when pwms reaches or exceeds pwmcmpO, pwmcount is cleared to 
zero and the current PWM cycle is completed. Otherwise, the counter is allowed to wrap 
around. 


20.8 Deglitch and Sticky Circuitry 


To avoid glitches in the PWM waveforms when changing pwmcmp.X register values, the 
pwmdeglitch bit in pwmcfg can be set to capture any high output of a PWM comparator ina 
sticky bit (pwmcmp.X ip for comparator X) and prevent the output falling again within the same 
PWM cycle. The pwmcmp.X ip bits are only allowed to change at the start of the next PWM cycle. 


Note 


The pwmcmp@ip bit will only be high for one cycle when pwmdeglitch and pwmzerocmp are 


set where pwmcmpo is used to define the PWM cycle, but can be used as a regular PWM 
edge otherwise. 








If pwmdeglitch is set, but pwmzerocmp is clear, the deglitch circuit is still operational but is now 
triggered when pwms contains all 1s and will cause a carry out of the high bit of the pwms incre- 
menter just before the counter wraps to zero. 
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The pwmsticky bit disallows the pwmcmp.X ip registers from clearing if they are already set and 
is used to ensure interrupts are seen from the pwmcmp.X ip bits. 


20.9 Generating Left- or Right-Aligned PWM Waveforms 





Figure 11: Basic right-aligned PWM waveforms. All possible base waveforms are shown for a 

7-clock PWM cycle (pwmcmp0=6). The waveforms show the single-cycle delay caused by regis- 

tering the comparator outputs in the pwmcmp.X ip bits. The signals can be inverted at the GPIOs 
to generate left-aligned waveforms. 


Figure 11 shows the generation of various base PWM waveforms. The figure illustrates that if 
pwmcmpo is set to less than the maximum count value (6 in this case), it is possible to generate 
both 100% (pwmcmpX = 0) and 0% (pwmcmp.X > pwmcmp6) right-aligned duty cycles using the 
other comparators. The pwmcmp.X ip bits are routed to the GPIO pads, where they can be 
optionally and individually inverted, thereby creating left-aligned PWM waveforms (high at 
beginning of cycle). 


20.10 Generating Center-Aligned (Phase-Correct) PWM 


Waveforms 


The simple PWM waveforms in Figure 11 shift the phase of the waveform along with the duty 
cycle. A per-comparator pwmcmp Xcenter bit in pwmcfg allows a single PWM comparator to 
generate a center-aligned symmetric duty-cycle as shown in Figure 12. The pwmcmp_X center bit 
changes the comparator to compare with the bitwise inverted pwms value whenever the MSB of 


pwms is high. 
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This technique provides symmetric PWM waveforms but only when the PWM cycle is at the 
largest supported size. At a 16 MHz bus clock rate with 16-bit precision, this limits the fastest 
PWM cycle to 244 Hz, or 62.5 kHz with 8-bit precision. Higher bus clock rates allow proportion- 
ally faster PWM cycles using the single comparator center-aligned waveforms. This technique 
also reduces the effective width resolution by a factor of 2. 





Table 97: Illustration of how count value is inverted before presentation to comparator when 
pwmcmp.X center is selected, using a 3-bit pwms value. 





1 
1 
pwmcmpX=0 ; ; 
1 1 
1 1 
pwmempX=1 | : 
1 ' 1 
1 
pwmcmpX=2 s.r eee eee, een eee 
1 
i] 1 
pwmcmpX=3 } ; 
i] i] 
pwmcmpx=4 ; 
Figure 12: Center-aligned PWM waveforms generated from one comparator. All possible 


waveforms are shown for a 3-bit PWM precision. The signals can be inverted at the GPIOs to 
generate opposite-phase waveforms. 


When a comparator is operating in center mode, the deglitch circuit allows one O-to-1 transition 
during the first half of the cycle and one 1-to-0 transition during the second half of the cycle. 


20.11 Generating Arbitrary PWM Waveforms using Ganging 


A comparator can be ganged together with its next-highest-numbered neighbor to generate arbi- 
trary PWM pulses. When the pwmcmp.X gang bit is set, comparator X fires and raises its 

pwm.X gpio signal. When comparator X + 1 (or pwmcmpo for pwmcmp3) fires, the pwm_X gpio out- 
put is reset to zero. 
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20.12 Generating One-Shot Waveforms 


The PWM peripheral can be used to generate precisely timed one-shot pulses by first initializing 
the other parts of pwmcfg then writing a 1 to the pwmenoneshot bit. The counter will run for one 
PWM cycle, then once a reset condition occurs, the pwmenoneshot bit is reset in hardware to 
prevent a second cycle. 


20.13 PWM Interrupts 


The PWM can be configured to provide periodic counter interrupts by enabling auto-zeroing of 
the count register when a comparator 0 fires (pwmzerocmp=1). The pwmsticky bit should also 
be set to ensure interrupts are not forgotten while waiting to run a handler. 


The interrupt pending bits pwmcmp_X ip can be cleared down using writes to the pwmcfg register. 


The PWM peripheral can also be used as a regular timer with no counter reset (pwmzerocmp=0), 
where the comparators are now used to provide timer interrupts. 


Chapter 21 


Inter-Integrated Circuit (I?C) Master 
Interface 


The SiFive Inter-Integrated Circuit (I2?C) Master Interface is based on OpenCores® |I2C Master 
Core. 


Download the original documentation at https://opencores.org/project,i2c. 


All I2C control register addresses are 4-byte aligned. 


21.1 I?C Instance in FE310-G002 


FE310-G002 contains one I2C instance. Its address is shown in Table 98. 


Instance Number 


Table 98: |[2C Instance 
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Chapter 22 


Debug 


This chapter describes the operation of SiFive debug hardware, which follows The RISC-V 
Debug Specification 0.13. Currently only interactive debug and hardware breakpoints are sup- 
ported. 


22.1 Debug CSRs 


This section describes the per-hart trace and debug registers (TDRs), which are mapped into 
the CSR space as follows: 


CSR Name llowed Access Modes 
Trace and debug register select 


First field of selected TDR 
Second field of selected TDR 


redatas__[ Third field of selected TDR___| 
Pdesr | Debug control and status register | 
rape —~SC*~iri bug PCS 
dscratch | Debug scratch register —SCSC—=S 


Table 99: Debug Control and Status Registers 





The dcsr, dpc, and dscratch registers are only accessible in debug mode, while the tselect 
and tdata1-3 registers are accessible from either debug mode or machine mode. 


22.1.1 Trace and Debug Register Select (tselect) 


To support a large and variable number of TDRs for tracing and breakpoints, they are accessed 
through one level of indirection where the tselect register selects which bank of three 
tdata1-3 registers are accessed via the other three addresses. 


The tselect register has the format shown below: 


104 
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Trace and Debug Select Register 
CSR 


Field Name Attr. 
[31:0] WARL__| Selection index of trace and debug registers 


Table 100: tselect CSR 





The index field is a WARL field that does not hold indices of unimplemented TDRs. Even if 
index can hold a TDR index, it does not guarantee the TDR exists. The type field of tdata1 
must be inspected to determine whether the TDR exists. 


22.1.2 Trace and Debug Data Registers (tdata1-3) 


The tdata1-3 registers are XLEN-bit read/write registers selected from a larger underlying 
bank of TDR registers by the tselect register. 


Trace and Debug Data Register 1 


Field Name 


[27:0] TDR-Specific Data 


[31:28] type Type of the trace & debug register selected 
by tselect 


Table 101: tdata1 CSR 





Trace and Debug Data Registers 2 and 3 


| Bits | FieldName | Attr._| Description 
[31:0] TDR-Specific Data 


Table 102: tdata2/3 CSRs 





The high nibble of tdata1 contains a 4-bit type code that is used to identify the type of TDR 
selected by tselect. The currently defined types are shown below: 


|O | No such TDR register 


Address/Data Match Trigger 


Table 103: tdata Types 





The dmode bit selects between debug mode (dmode=1) and machine mode (dmode=1) views of 
the registers, where only debug mode code can access the debug mode view of the TDRs. Any 
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attempt to read/write the tdata1-3 registers in machine mode when dmode=1 raises an illegal 
instruction exception. 


22.1.3. Debug Control and Status Register (dcsr) 


This register gives information about debug capabilities and status. Its detailed functionality is 
described in The RISC-V Debug Specification 0.13. 


22.1.4 Debug PC dpc 


When entering debug mode, the current PC is copied here. When leaving debug mode, execu- 
tion resumes at this PC. 


22.1.5 Debug Scratch dscratch 


This register is generally reserved for use by Debug ROM in order to save registers needed by 
the code in Debug ROM. The debugger may use it as described in The RISC-V Debug Specifi- 
cation 0.13. 


22.2 Breakpoints 


The FE310-G002 supports eight hardware breakpoint registers per hart, which can be flexibly 
shared between debug mode and machine mode. 


When a breakpoint register is selected with tselect, the other CSRs access the following infor- 
mation for the selected breakpoint: 


CSR Name | Breakpoint Alias 
Breakpoint selection index 
Breakpoint match control 


Breakpoint match address 


Table 104: TDR CSRs when used as Breakpoints 





22.2.1 Breakpoint Match Control Register mcontrol 


Each breakpoint control register is a read/write register laid out in Table 105. 
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Breakpoint Control Register (mcontro1) 
Register Offset CSR 


[10:7] WARL Breakpoint Address Match type 
11 WARL | ~~ 0 _| Chain adjacent conditions. 
[17:12] WARL | 0 _| Breakpoint action to take. 0 or 1. 


18 Timing of the breakpoint. Always 0. 


19 select WARL Perform match on address or data. 
Always 0. 


20 Reserved PRI Reserved 


[26:21] 4 Largest supported NAPOT range 


27 RW | 0 __| Debug-Only access mode 
[31:28] Address/Data match type, always 2 
Table 105: Test and Debug Data Register 3 





The type field is a 4-bit read-only field holding the value 2 to indicate this is a breakpoint con- 
taining address match logic. 


The bpaction field is an 8-bit read-write WARL field that specifies the available actions when 
the address match is successful. The value 0 generates a breakpoint exception. The value 1 
enters debug mode. Other actions are not implemented. 


The R/W/X bits are individual WARL fields, and if set, indicate an address match should only be 
successful for loads/stores/instruction fetches, respectively, and all combinations of imple- 
mented bits must be supported. 


The M/S/U bits are individual WARL fields, and if set, indicate that an address match should 
only be successful in the machine/supervisor/user modes, respectively, and all combinations of 
implemented bits must be supported. 


The match field is a 4-bit read-write WARL field that encodes the type of address range for 
breakpoint address matching. Three different match settings are currently supported: exact, 
NAPOT, and arbitrary range. A single breakpoint register supports both exact address matches 
and matches with address ranges that are naturally aligned powers-of-two (NAPOT) in size. 
Breakpoint registers can be paired to specify arbitrary exact ranges, with the lower-numbered 
breakpoint register giving the byte address at the bottom of the range and the higher-numbered 
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breakpoint register giving the address 1 byte above the breakpoint range, and using the chain 
bit to indicate both must match for the action to be taken. 


NAPOT ranges make use of low-order bits of the associated breakpoint address register to 
encode the size of the range as follows: 


16-byte NAPOT range 
32-byte NAPOT range 


2°+.byte NAPOT range 


Table 106: NAPOT Size Encoding 





The maskmax field is a 6-bit read-only field that specifies the largest supported NAPOT range. 
The value is the logarithm base 2 of the number of bytes in the largest supported NAPOT range. 
A value of 0 indicates that only exact address matches are supported (1-byte range). A value of 


31 corresponds to the maximum NAPOT range, which is ast bytes in size. The largest range is 
encoded in maddress with the 30 least-significant bits set to 1, bit 30 set to 0, and bit 31 holding 
the only address bit considered in the address comparison. 


To provide breakpoints on an exact range, two neighboring breakpoints can be combined with 
the chain bit. The first breakpoint can be set to match on an address using action of 2 (greater 
than or equal). The second breakpoint can be set to match on address using action of 3 (less 
than). Setting the chain bit on the first breakpoint prevents the second breakpoint from firing 
unless they both match. 


22.2.2 Breakpoint Match Address Register (maddress) 


Each breakpoint match address register is an XLEN-bit read/write register used to hold signifi- 
cant address bits for address matching and also the unary-encoded address masking informa- 
tion for NAPOT ranges. 


22.2.3. Breakpoint Execution 


Breakpoint traps are taken precisely. Implementations that emulate misaligned accesses in soft- 
ware will generate a breakpoint trap when either half of the emulated access falls within the 
address range. Implementations that support misaligned accesses in hardware must trap if any 
byte of an access falls within the matching range. 
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Debug-mode breakpoint traps jump to the debug trap vector without altering machine-mode reg- 
isters. 


Machine-mode breakpoint traps jump to the exception vector with "Breakpoint" set in the 
mcause register and with badaddr holding the instruction or data address that caused the trap. 


22.2.4 Sharing Breakpoints Between Debug and Machine Mode 


When debug mode uses a breakpoint register, it is no longer visible to machine mode (that is, 
the tdrtype will be 0). Typically, a debugger will leave the breakpoints alone until it needs them, 
either because a user explicitly requested one or because the user is debugging code in ROM. 


22.3 Debug Memory Map 


This section describes the debug module’s memory map when accessed via the regular system 
interconnect. The debug module is only accessible to debug code running in debug mode ona 
hart (or via a debug transport module). 


22.3.1 Debug RAM and Program Buffer (0x300-0x3FF) 


The FE310-G002 has 16 32-bit words of program buffer for the debugger to direct a hart to exe- 
cute arbitrary RISC-V code. Its location in memory can be determined by executing aiupc 
instructions and storing the result into the program buffer. 


The FE310-G002 has one 32-bit words of debug data RAM. Its location can be determined by 
reading the DMHARTINFO register as described in the RISC-V Debug Specification. This RAM 
space is used to pass data for the Access Register abstract command described in the RISC-V 
Debug Specification. The FE310-G002 supports only general-purpose register access when 
harts are halted. All other commands must be implemented by executing from the debug pro- 
gram buffer. 


In the FE310-G002, both the program buffer and debug data RAM are general-purpose RAM 
and are mapped contiguously in the Core Complex memory space. Therefore, additional data 
can be passed in the program buffer, and additional instructions can be stored in the debug data 
RAM. 


Debuggers must not execute program buffer programs that access any debug module memory 
except defined program buffer and debug data addresses. 


The FE310-G002 does not implement the DMSTATUS. anyhavereset or 
DMSTATUS.allhavereset bits. 


22.3.2 Debug ROM (0x800-0xFFF) 


This ROM region holds the debug routines on SiFive systems. The actual total size may vary 
between implementations. 
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22.3.3. Debug Flags (0x100-—0x110, 0x400-0x7FF) 


The flag registers in the debug module are used for the debug module to communicate with 
each hart. These flags are set and read used by the debug ROM and should not be accessed 
by any program buffer code. The specific behavior of the flags is not further documented here. 


22.3.4 Safe Zero Address 


In the FE310-G002, the debug module contains the address 0x0 in the memory map. Reads to 
this address always return O, and writes to this address have no impact. This property allows a 
"safe" location for unprogrammed parts, as the default mtvec location is 0x0. 


Chapter 23 


Debug Interface 


The SiFive FE310-G002 includes the JTAG debug transport module (DTM) described in The 
RISC-V Debug Specification 0.13. This enables a single external industry-standard 1149.1 
JTAG interface to test and debug the system. The JTAG interface is directly connected to input 
pins. 


23.1 JTAG TAPC State Machine 


The JTAG controller includes the standard TAPC state machine shown in Figure 13. The state 
machine is clocked with TCK. All transitions are labelled with the value on TMS, except for the 
arc showing asynchronous reset when TRST=0. 


111 
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TRST=0 


1 | Test-Logic-Reset 
0 


(oI Run-Test-Idle 





Figure 13: JTAG TAPC state machine. 


23.2 Resetting JTAG Logic 


The JTAG logic must be asynchronously reset by asserting the power-on-reset signal. This dri- 
ves an internal jtag_reset signal. 


Asserting jtag_reset resets both the JTAG DTM and debug module test logic. Because parts 
of the debug logic require synchronous reset, the jtag_reset signal is synchronized inside the 
FE310-G002. 


During operation, the JTAG DTM logic can also be reset without jtag_reset by issuing 5 
jtag_TCkK clock ticks with jtag_TMS asserted. This action resets only the JTAG DTM, not the 
debug module. 


23.3. JTAG Clocking 


The JTAG logic always operates in its own clock domain clocked by jtag_TCK. The JTAG logic 
is fully static and has no minimum clock frequency. The maximum jtag_TCkK frequency is part- 
specific. 
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23.4 JTAG Standard Instructions 
The JTAG DTM implements the BYPASS and IDCODE instructions. 


On the FE310-G002, the IDCODE is set to 0x20000913. 


23.5 JTAG Debug Commands 


The JTAG DEBUG instruction gives access to the SiFive debug module by connecting the 
debug scan register between jtag_TDI and jtag_TDO. 


The debug scan register includes a 2-bit opcode field, a 7-bit debug module address field, and a 
32-bit data field to allow various memory-mapped read/write operations to be specified with a 
single scan of the debug scan register. 


These are described in The RISC-V Debug Specification 0.13. 
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